CVE-2022-2179 in MicroLogix 1100

摘要

由 MITRE • 2022-07-20

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 负责: ICS-CERT
• 预定: 2022-06-22
• 披露: 2022-07-20
• 管理: 已接受
• 条目: VDB-204688
• CPE: 准备好
• CWE: CWE-1021 (已确认)
• CVSS: 6.5 (NVD)
• EPSS: 0.01150
• KEV: 否
• 活动: 非常低
• 部门: Agriculture, Transportation, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-2179
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-2179
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-2179/