Micrologix 1400 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Rockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba) |
|---|---|
| Product | Micrologix 1400 Firmware (bddb3d47-b530-528c-b9b4-894fd10cc4eb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-2179 |
vulnerable | 2026-06-08 05:42:50.399406 |
ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames
MEDIUM (6.5)
The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.
Published: 2022-07-20T15:36:33.007Z
Updated: 2025-04-16T16:14:37.655Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32926 |
vulnerable | 2026-06-08 05:32:08.204873 |
Details available
When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an illegitimate hash. The user would no longer be able to authenticate to the controller (Micro800: All versions, MicroLogix 1400: Version 21 and later) causing a denial-of-service condition
Published: 2021-06-03T12:35:36.000Z
Updated: 2026-06-04T13:01:46.569Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22659 |
vulnerable | 2026-06-08 05:30:01.000401 |
Details available
Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a denial-of-service condition. The FAULT LED will flash RED and communications may be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user.
Published: 2021-03-25T15:59:07.000Z
Updated: 2026-06-03T13:10:07.459Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6492 |
vulnerable | 2026-06-08 05:06:52.559973 |
Details available
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HTTP request.
Published: 2015-10-28T10:00:00.000Z
Updated: 2026-06-03T13:15:39.866Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6491 |
vulnerable | 2026-06-08 05:06:52.559693 |
Details available
Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors.
Published: 2015-10-28T10:00:00.000Z
Updated: 2024-08-06T07:22:22.084Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6490 |
vulnerable | 2026-06-08 05:06:52.559407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6488 |
vulnerable | 2026-06-08 05:06:52.559090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6486 |
vulnerable | 2026-06-08 05:06:52.558613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.