CVE-2022-46670

🗓️ 16 Dec 2022 20:12:22Reported by RockwellType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 59 Views

Vulnerability in Rockwell Automation MicroLogix 1100 and 1400 controllers enables remote code execution.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-46670	17 Dec 202200:24	–	circl
CNNVD	Rockwell Automation MicroLogix 1100 和 MicroLogix 1400 跨站脚本漏洞	16 Dec 202200:00	–	cnnvd
CNVD	Rockwell Automation MicroLogix 1100 and MicroLogix 1400 Cross-Site Scripting Vulnerability	20 Dec 202200:00	–	cnvd
Cvelist	CVE-2022-46670 Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack	16 Dec 202220:12	–	cvelist
EUVD	EUVD-2022-49466	3 Oct 202520:07	–	euvd
ICS	Rockwell Automation MicroLogix 1100 and 1400	20 Dec 202200:00	–	ics
NVD	CVE-2022-46670	16 Dec 202221:15	–	nvd
Prion	Cross site scripting	16 Dec 202221:15	–	prion
Positive Technologies	PT-2022-27942 · Allen Bradley · Micrologix 1400 +1	13 Dec 202200:00	–	ptsecurity
Tenable Nessus	Rockwell Automation MicroLogix 1100 and 1400 Improper Neutralization of Input During Web Page Generation (CVE-2022-46670)	5 Jan 202300:00	–	nessus

NVD

Node

rockwellautomation micrologix_1400_firmwareMatch-

AND

rockwellautomation micrologix_1400Match-

Node

rockwellautomation micrologix_1100_firmwareMatch-

AND

rockwellautomation micrologix_1100Match-

Node

rockwellautomation micrologix_1400-b_firmwareRange≤21.007

AND

rockwellautomation micrologix_1400-bMatch-

Node

rockwellautomation micrologix_1400-c_firmwareRange≤21.007

AND

rockwellautomation micrologix_1400-cMatch-

Node

rockwellautomation micrologix_1400-a_firmwareRange≤7.000

AND

rockwellautomation micrologix_1400-aMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "MicroLogix 1100 & 1400 Controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MicroLogix 1400-B/C",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "21.007 and below"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MicroLogix 1400-A",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "7.000 and below"
      }
    ]
  }
]

Source	Link
rockwellautomation	www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679

21 Nov 2024 07:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.1 - 7.1

EPSS0.00032

SSVC

CWE-79