Rockwell Automation Micrologix 1400 Controllers Series B V21.001 And Prior, Series A, All Versions, Micrologix 1100 Controller, All Versions, Rslogix 500 Software V12.001 And Prior

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:rockwell_automation_micrologix_1400_controllers_series_b_v21.001_and_prior,_series_a,_all_versions,_micrologix_1100_controller,_all_versions,_rslogix_500_software_v12.001_and_prior:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductRockwell Automation Micrologix 1400 Controllers Series B V21.001 And Prior, Series A, All Versions, Micrologix 1100 Controller, All Versions, Rslogix 500 Software V12.001 And Prior (9c6ff5bd-f06a-52c0-98da-7d418417c949)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6990 vulnerable 2026-06-08 05:27:11.563654 Details available
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could identify cryptographic keys and use it for further cryptographic attacks that could ultimately lead to a remote attacker gaining unauthorized access to the controller.
Published: 2020-03-16T15:39:45.000Z
Updated: 2026-06-03T13:26:25.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6988 vulnerable 2026-06-08 05:27:11.554192 Details available
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, A remote, unauthenticated attacker can send a request from the RSLogix 500 software to the victim’s MicroLogix controller. The controller will then respond to the client with used password values to authenticate the user on the client-side. This method of authentication may allow an attacker to bypass authentication altogether, disclose sensitive information, or leak credentials.
Published: 2020-03-16T15:38:36.000Z
Updated: 2026-06-03T13:21:33.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6984 vulnerable 2026-06-08 05:27:11.512636 Details available
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable.
Published: 2020-03-16T15:41:13.000Z
Updated: 2026-06-03T13:22:52.674Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6980 vulnerable 2026-06-08 05:27:11.418404 Details available
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol (SMTP) account data is saved in RSLogix 500, a local attacker with access to a victim’s project may be able to gather SMTP server authentication data as it is written to the project file in cleartext.
Published: 2020-03-16T15:36:51.000Z
Updated: 2024-08-04T09:18:02.979Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.