CVE-2022-46670
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.
| Software | From | Fixed in |
|---|---|---|
| rockwellautomation / micrologix_1400-b_firmware | - | 21.007.x |
| rockwellautomation / micrologix_1400-c_firmware | - | 21.007.x |
| rockwellautomation / micrologix_1400-a_firmware | - | 7.000.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime