CVE-2022-2179 in MicroLogix 1100

الملخص

بحسب MITRE • 20/07/2022

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• مسؤول: ICS-CERT
• حجز: 22/06/2022
• إفشاء: 20/07/2022
• الاعتدال: تمت الموافقة
• إدخال: VDB-204688
• CPE: جاهز
• CWE: CWE-1021 (مؤكد)
• CVSS: 6.5 (NVD)
• EPSS: 0.01150
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Pharma, Chemical, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-2179
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-2179
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-2179/