[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDZN4LhbknZL6ijPuTqpTGxZloCNOWpGKstlMBTsXy-c":3,"g5a-ex:rockwellautomation\u002Fmicrologix_1400_firmware@*":107,"g5a-family:rockwellautomation\u002Fmicrologix_1400_firmware":109},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":84,"seoMetadata":85,"meta":104},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":21},"rockwellautomation","micrologix_1400_firmware",3,11,0,"2022-12-16",[14,17,19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"21.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"21.007",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"21.6","Micrologix 1400 Firmware by Rockwellautomation is a technology product with 3 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24,25],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},[27,35,41,48,54,60,65,70,75,80],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":34},"CVE-2015-6490","Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors.","2015-10-28",10,"v2","Critical",0.07022,{"cveId":36,"description":37,"publishedDate":30,"cvssScore":38,"cvssVersion":32,"severity":39,"isKev":16,"epssScore":40},"CVE-2015-6492","Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers to cause a denial of service (memory corruption and device crash) via a crafted HTTP request.",7.8,"High",0.0448,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":39,"isKev":16,"epssScore":47},"CVE-2018-17924","Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller in the system is set to Hard RUN mode. When the affected device accepts this new IP configuration, a loss of communication occurs between the device and the rest of the system as the system traffic is still attempting to communicate with the device via the overwritten IP address.","2018-12-07",8.6,"v3.1",0.04335,{"cveId":49,"description":50,"publishedDate":30,"cvssScore":51,"cvssVersion":32,"severity":52,"isKev":16,"epssScore":53},"CVE-2015-6486","SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.",6.5,"Medium",0.04292,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":46,"severity":39,"isKev":16,"epssScore":59},"CVE-2021-32926","When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an illegitimate hash. The user would no longer be able to authenticate to the controller (Micro800: All versions, MicroLogix 1400: Version 21 and later) causing a denial-of-service condition","2021-06-03",7.5,0.02982,{"cveId":61,"description":62,"publishedDate":30,"cvssScore":63,"cvssVersion":32,"severity":52,"isKev":16,"epssScore":64},"CVE-2015-6488","Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",4.3,0.02836,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":45,"cvssVersion":46,"severity":39,"isKev":16,"epssScore":69},"CVE-2021-22659","Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a denial-of-service condition. The FAULT LED will flash RED and communications may be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user.","2021-03-25",0.01795,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":51,"cvssVersion":46,"severity":52,"isKev":16,"epssScore":74},"CVE-2022-2179","The X-Frame-Options header in Rockwell Automation MicroLogix 1100\u002F1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.","2022-07-20",0.01684,{"cveId":76,"description":77,"publishedDate":30,"cvssScore":78,"cvssVersion":32,"severity":52,"isKev":16,"epssScore":79},"CVE-2015-6491","Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticated users to insert the content of an arbitrary file into a FRAME element via unspecified vectors.",4,0.01617,{"cveId":81,"description":82,"publishedDate":12,"cvssScore":58,"cvssVersion":46,"severity":39,"isKev":16,"epssScore":83},"CVE-2022-3166","\nRockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device\n\n",0.00723,[],{"title":86,"metaDescription":87,"keywords":88,"structuredData":89},"Micrologix 1400 Firmware by Rockwellautomation - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Micrologix 1400 Firmware by Rockwellautomation covering 3 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Micrologix 1400 Firmware vulnerabilities, Micrologix 1400 Firmware security, Micrologix 1400 Firmware CVE, Rockwellautomation Micrologix 1400 Firmware, Micrologix 1400 Firmware threat intelligence, Rockwellautomation security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":90,"@type":91,"name":92,"description":87,"url":93,"manufacturer":94,"applicationCategory":98,"softwareVersion":99,"mainEntity":100},"https:\u002F\u002Fschema.org","SoftwareApplication","Micrologix 1400 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Frockwellautomation\u002Fmicrologix_1400_firmware",{"@type":95,"name":96,"url":97},"Organization","Rockwellautomation","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Frockwellautomation","Security Software","3 versions tracked",{"@type":101,"name":102,"description":103,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Micrologix 1400 Firmware Security Vulnerabilities","Security vulnerabilities affecting Micrologix 1400 Firmware by Rockwellautomation",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":105,"apiVersion":106},"2026-10-17T10:49:30.596Z","3.0",{"rows":108,"total":11,"capped":16,"failed":11},[],[]]