Lucene search
PRIOn knowledge basePRION:CVE-2022-46670HistoryDec 16, 2022 - 9:15 p.m.
Cross site scripting
2022-12-1621:15:00
PRIOn knowledge base
www.prio-n.com
2
rockwell automation
georgia institute of technology
micrologix 1100
micrologix 1400
remote code execution
unauthenticated
cross-site scripting
embedded webserver
snmp
homepage
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.
| CPE | Name | Operator | Version |
|---|---|---|---|
| micrologix_1400-a_firmware | le | 7.000 | |
| micrologix_1400-b_firmware | le | 21.007 | |
| micrologix_1400-c_firmware | le | 21.007 |
Related
nvd
nvd
CVE-2022-46670
2022-12-16 21:15:09
cvelist
cvelist
nessus
nessus
cve
cve
CVE-2022-46670
2022-12-16 21:15:09
ics
ics
Rockwell Automation MicroLogix 1100 and 1400
2022-12-20 12:00:00