CVE-2022-46670EPSS p44.7%
CVE-2022-46670CVE-2022-46670
rockwellautomation / micrologix_1400_firmware
Description
Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.
Scoring
| CVSS | 7.1 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
| EPSS | 0.56% probability of exploitation · percentile 44.7% · 2026-10-05T12:00:23Z |
| Last modified | 2026-06-17 |