Rockwell Automation Micrologix 1400 Luki w zabezpieczeniach

Oś czasu

Wersja

21.02
21.12
21.22
21.32
21.42

Przeciwdziałanie

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined10

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined12

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent0
Network12

Uwierzytelnianie

Not Defined0
High0
Low2
None10

Interakcja z użytkownikiem

Not Defined0
Required4
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤62
≤74
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤62
≤74
≤84
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤54
≤62
≤72
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤74
≤82
≤92
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤84
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k8
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k12
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (9): 21.0, 21.002, 21.007, 21.1, 21.2, 21.3, 21.4, 21.5, 21.6

Typ oprogramowania: Automation Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2022-12-175.85.8Rockwell Automation MicroLogix 1100/MicroLogix 1400 Embedded Webserver cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2022-46670
2022-12-167.57.5Rockwell Automation MicroLogix 1100/MicroLogix 1400 TCP Packet denial of service$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-3166
2022-07-215.85.8Rockwell Automation MicroLogix 1100/MicroLogix 1400 X-Frame-Options Header privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2022-2179
2021-06-034.24.2Rockwell Automation Micro800/MicroLogix 1400 Password Change Request privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2021-32926
2021-03-266.96.6Rockwell Automation MicroLogix 1400 ModBus Packet memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-22659
2020-03-168.58.5Rockwell Automation MicroLogix 1100/MicroLogix 1400/RSLogix 500 weak encryption$0-$5k$0-$5kNot DefinedNot Defined0.08CVE-2020-6990
2020-03-167.47.4Rockwell Automation MicroLogix 1100/MicroLogix 1400/RSLogix 500 Remote Code Execution$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2020-6988
2020-03-167.57.5Rockwell Automation MicroLogix 1100/MicroLogix 1400/RSLogix 500 weak encryption$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2020-6984
2020-03-163.33.3Rockwell Automation MicroLogix 1100/MicroLogix 1400/RSLogix 500 Credentials weak encryption$0-$5k$0-$5kNot DefinedNot Defined0.08CVE-2020-6980
2019-04-256.26.2Rockwell Automation MicroLogix 1100 Redirect$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2019-10955

1 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Rockwell Automation

Want to stay up to date on a daily basis?

Enable the mail alert feature now!