6.5 Medium

CVE-2022-2179 The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in…

Description

The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.

Affected products and versions

Product	Affected versions	Fixed in
MicroLogix 1400 21.007	earliest → 21.007	No fix stated
MicroLogix 1100	Versions not published

Do you use MicroLogix 1400?

Track this CVE Watch MicroLogix 1400 Check my SBOMs

www.cveye.io/en/cve/CVE-2022-2179

Timeline

Published July 20, 2022
Last modified April 16, 2025

References

www.cisa.gov www.cisa.gov
rockwellautomation.custhelp.com rockwellautomation.custhelp.com

Track this CVE