CVE-2022-2179 in MicroLogix 1100

Résumé

par MITRE • 20/07/2022

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: ICS-CERT
• Réserver: 22/06/2022
• Divulgation: 20/07/2022
• Modérer: accepté
• Entrée: VDB-204688
• CPE: prêt
• CWE: CWE-1021 (confirmé)
• CVSS: 6.5 (NVD)
• EPSS: 0.01150
• KEV: non
• Activités: très faible
• Secteur: Chemical, Agriculture, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-2179
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-2179
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-2179/