CVE-2022-2179

Katalog CVE

CVSS 6.5 · Medium EPSS 1,7%

Kerentanan Improper Restriction of Rendered UI Layers or Frames pada rockwellautomation micrologix 1100 firmware, rockwellautomation micrologix 1400 firmware. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

Rincian

Terbit di NVD

20 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1135994 permissions required · advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-188-01 advisory pihak ketiga · pemerintah AS