micrologix_1400 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/micrologix_1400/ Sun, 26 Feb 2023 06:47:37 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png micrologix_1400 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/micrologix_1400/ 32 32 CVE-2018-17924 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17924/ Sun, 26 Feb 2023 06:47:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17924/ Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller in the system is set to Hard RUN mode. When the affected device […]

The post CVE-2018-17924 appeared first on CVE Vulnerability.

]]> Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller in the system is set to Hard RUN mode. When the affected device accepts this new IP configuration, a loss of communication occurs between the device and the rest of the system as the system traffic is still attempting to communicate with the device via the overwritten IP address.

The post CVE-2018-17924 appeared first on CVE Vulnerability.

]]> CVE-2021-32926 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-32926/ Thu, 23 Feb 2023 14:09:53 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-32926/ When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an illegitimate hash. The user would no longer be able to authenticate to the controller (Micro800: All versions, MicroLogix 1400: Version 21 and later) causing a […]

The post CVE-2021-32926 appeared first on CVE Vulnerability.

]]> When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an illegitimate hash. The user would no longer be able to authenticate to the controller (Micro800: All versions, MicroLogix 1400: Version 21 and later) causing a denial-of-service condition

The post CVE-2021-32926 appeared first on CVE Vulnerability.

]]> CVE-2022-46670 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-46670/ Thu, 23 Feb 2023 05:21:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-46670/ Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is […]

The post CVE-2022-46670 appeared first on CVE Vulnerability.

]]> Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.

The post CVE-2022-46670 appeared first on CVE Vulnerability.

]]> CVE-2022-3166 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-3166/ Thu, 23 Feb 2023 05:18:55 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-3166/ Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a […]

The post CVE-2022-3166 appeared first on CVE Vulnerability.

]]> Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device

The post CVE-2022-3166 appeared first on CVE Vulnerability.

]]> CVE-2022-2179 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-2179/ Thu, 23 Feb 2023 05:02:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-2179/ The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

The post CVE-2022-2179 appeared first on CVE Vulnerability.

]]> The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

The post CVE-2022-2179 appeared first on CVE Vulnerability.

]]>