Known vulnerabilities in Allen-Bradley MicroLogix 1100

Vendor: Rockwell Automation
Software: Allen-Bradley MicroLogix 1100
Software CPE: cpe:2.3:h:rockwell_automation:allen-bradley_micrologix_1100:*:*:*:*:*:*:*:*
Website: https://www.rockwellautomation.com/
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Allen-Bradley MicroLogix 1100 Allen-Bradley MicroLogix 1100 is affected by 14 known vulnerabilities: 2 high, 7 medium, 5 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70631 - Improper Restriction of Rendered UI Layers or Frames
CVE-2022-3166		 CWE-1021 Medium
No
No
 - 03.01.2023 SB2023010310
#VU70629 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-46670		 CWE-79 Low
No
No
 - 03.01.2023 SB2023010310
#VU65061 - Improper Restriction of Rendered UI Layers or Frames
CVE-2022-2179		 CWE-1021 Medium
No
No
 - 08.07.2022 SB2022070821
#VU54631 - Improper input validation
CVE-2021-33012		 CWE-20 Medium
No
No
 - 09.07.2021 SB2021070905
#VU48767 - Improper input validation
CVE-2020-6111		 CWE-20 Medium
No
No
 - 03.12.2020 SB2020101370
#VU25992 - Cleartext Storage of Sensitive Information
CVE-2020-6980		 CWE-312 Low
No
No
 - 11.03.2020 SB2020031124
#VU25991 - Use of Client-Side Authentication
CVE-2020-6988		 CWE-603 Medium
No
No
 - 11.03.2020 SB2020031124
#VU25990 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-6984		 CWE-327 Medium
No
No
 - 11.03.2020 SB2020031124
#VU25989 - Use of Hard-coded Cryptographic Key
CVE-2020-6990		 CWE-321 Medium
No
No
 - 11.03.2020 SB2020031124
#VU6699 - Weak Password Requirements
CVE-2017-7903		 CWE-521 High
No
No
 - 24.05.2017 SB2017052412
#VU6698 - Reusing a Nonce, Key Pair in Encryption
CVE-2017-7902		 CWE-323 Low
No
No
 - 24.05.2017 SB2017052412
#VU6697 - Predictable Value Range from Previous Values
CVE-2017-7901		 CWE-343 Low
No
No
 - 24.05.2017 SB2017052412
#VU6696 - Information Exposure Through Query Strings in GET Request
CVE-2017-7899		 CWE-598 Low
No
No
 - 24.05.2017 SB2017052412
#VU6695 - Improper Restriction of Excessive Authentication Attempts
CVE-2017-7898		 CWE-307 High
No
No
 - 24.05.2017 SB2017052412