NetSight
medium6.5

CVE-2022-2179

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clic…

Impact

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

Affected products

VendorProductAffected versions
RockwellautomationMicrologix 1100 Firmware
All versions
RockwellautomationMicrologix 1400 Firmware
through 21.007

Weakness classification

References