ICSA-22-354-04

icsaUScisa_csaf_ot

Rockwell Automation MicroLogix 1100 and 1400

view advisory published 2022-12-20

Successful exploitation of these vulnerabilities could create a denial-of-service condition or allow for remote code execution.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2022-46670USmedium6.1—
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnera…
CVE-2022-3166UShigh7.5—
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The secu…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationMicroLogix 1100

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1100

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1400 A

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1400 A

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1400 B/C

    Configure firewalls to disallow network communication through HTTP/Port 802

  • MitigationMicroLogix 1400 B/C

    Configure firewalls to disallow network communication through HTTP/Port 802

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan