CVE-2022-46670

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-46670
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution.  The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References
Link Resource
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679 Vendor Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:micrologix_1100:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:rockwellautomation:micrologix_1400-b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:micrologix_1400-b:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:rockwellautomation:micrologix_1400-c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:micrologix_1400-c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:rockwellautomation:micrologix_1400-a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:micrologix_1400-a:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:30

Type Values Removed Values Added
References () https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679 - Vendor Advisory () https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679 - Vendor Advisory
CVSS v2 : unknown
v3 : 6.1 		v2 : unknown
v3 : 7.1

07 Nov 2023, 03:55

Type Values Removed Values Added
Summary Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website. Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution.  The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.
Information

Published : 2022-12-16 21:15

Updated : 2024-11-21 07:30

NVD link : CVE-2022-46670

Mitre link : CVE-2022-46670

CVE.ORG link : CVE-2022-46670

JSON object : View

Products Affected

rockwellautomation

  • micrologix_1400-b_firmware
  • micrologix_1100
  • micrologix_1400-c
  • micrologix_1400-b
  • micrologix_1100_firmware
  • micrologix_1400-c_firmware
  • micrologix_1400
  • micrologix_1400-a_firmware
  • micrologix_1400-a
  • micrologix_1400_firmware
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')