CVE-2022-2179 MEDIUM

CVE-2022-2179: ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames

Vendor Rockwell Automation
Product MicroLogix 1400
Weakness CWE-1021
Published July 20, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

Key dates

02Disclosure timeline

July 20, 2022 CVE published
April 16, 2025 Record updated