CVE-2022-46670EPSS p41.3%
CVE-2022-46670CVE-2022-46670
rockwellautomation / micrologix_1400_firmware
Description
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.
Scoring
| CVSS | 7.1 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
| EPSS | 0.54% probability of exploitation · percentile 41.3% · 2026-06-19T12:03:05Z |
| Last modified | 2026-06-17 |