Rockwellautomation Micrologix 1100 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Rockwellautomation Micrologix 1100 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2015-6490 — CVSS 9.8 (critical): Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows…
• CVE-2020-6990 — CVSS 9.8 (critical): Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all…
• CVE-2021-33012 — CVSS 8.6 (high): Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause…
• CVE-2020-6984 — CVSS 7.5 (high): Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all…
• CVE-2015-6492 — CVSS 7.5 (high): Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of…
• CVE-2022-3166 — CVSS 7.5 (high): Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to…
• CVE-2020-6988 — CVSS 7.5 (high): Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all…
• CVE-2022-46670 — CVSS 7.1 (high): Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix…
• CVE-2022-2179 — CVSS 6.5 (medium): The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response…
• CVE-2015-6486 — CVSS 6.5 (medium): SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote…
• CVE-2019-10955 — CVSS 6.1 (medium): In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00…
• CVE-2015-6488 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices…
• CVE-2015-6491 — CVSS 4.0 (medium): Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert…
• CVE-2020-6980 — CVSS 3.3 (low): Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all…