Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-2179

ICSA-22-188-01 Rockwell Automation MicroLogix Improper Restriction of Rendered UI Layers or Frames

Description

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation MicroLogix 1400

  • unspecified to ≤ 21.007affected

Rockwell Automation MicroLogix 1100

  • All versionsaffected

References