Known vulnerabilities in Allen-Bradley MicroLogix 1400

Vendor: Rockwell Automation
Software: Allen-Bradley MicroLogix 1400
Software CPE: cpe:2.3:h:rockwell_automation:allen-bradley_micrologix_1400:*:*:*:*:*:*:*:*
Website: https://www.rockwellautomation.com/
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Allen-Bradley MicroLogix 1400 Allen-Bradley MicroLogix 1400 is affected by 15 known vulnerabilities: 4 high, 3 medium, 8 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65061 - Improper Restriction of Rendered UI Layers or Frames
CVE-2022-2179		 CWE-1021 Medium
No
No
 - 08.07.2022 SB2022070821
#VU53593 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-32926		 CWE-300 Medium
No
No
 - 26.05.2021 SB2021052633
#VU50270 - Memory corruption
CVE-2021-22659		 CWE-119 Medium
No
No
 - 03.02.2021 SB2021020303
#VU11610 - Improper Authentication
CVE-2017-12093		 CWE-287 Low
No
No
 - 06.04.2018 SB2018032825
#VU11609 - Improper Authentication
CVE-2017-12092		 CWE-287 Low
No
No
 - 06.04.2018 SB2018032825
#VU11608 - Improper Authentication
 CWE-287 High
No
No
 - 06.04.2018 SB2018032825
#VU11607 - Improper Authentication
CVE-2017-12090		 CWE-287 Low
No
No
 - 06.04.2018 SB2018032825
#VU11606 - Improper Authentication
CVE-2017-12089		 CWE-287 Low
No
No
 - 06.04.2018 SB2018032825
#VU11605 - Improper Authentication
CVE-2017-12088		 CWE-287 Low
No
No
 - 06.04.2018 SB2018032825
#VU9919 - Stack-based buffer overflow
CVE-2017-16740		 CWE-121 High
No
No
 - 10.01.2018 SB2018011006
#VU6699 - Weak Password Requirements
CVE-2017-7903		 CWE-521 High
No
No
 - 24.05.2017 SB2017052412
#VU6698 - Reusing a Nonce, Key Pair in Encryption
CVE-2017-7902		 CWE-323 Low
No
No
 - 24.05.2017 SB2017052412
#VU6697 - Predictable Value Range from Previous Values
CVE-2017-7901		 CWE-343 Low
No
No
 - 24.05.2017 SB2017052412
#VU6696 - Information Exposure Through Query Strings in GET Request
CVE-2017-7899		 CWE-598 Low
No
No
 - 24.05.2017 SB2017052412
#VU6695 - Improper Restriction of Excessive Authentication Attempts
CVE-2017-7898		 CWE-307 High
No
No
 - 24.05.2017 SB2017052412