Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-3166

Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device

Published

2022-12-16T20:15:08.760

Last Modified

2024-11-21T07:18:57.717

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-924
  • Type: Primary
    CWE-924
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System rockwellautomation micrologix_1100_firmware - Yes
Hardware rockwellautomation micrologix_1100 - No
Operating System rockwellautomation micrologix_1400_firmware - Yes
Hardware rockwellautomation micrologix_1400 - No
References