CVE:CVE-2022-2179
CNNVD:CNNVD-202207-614
Rockwell Automation MicroLogix 1400和Rockwell Automation MicroLogix 1100都是美国Rockwell Automation公司的产品。Rockwell Automation MicroLogix 1400是一款可编程逻辑控制器。Rockwell Automation MicroLogix 1100是一种可编程逻辑控制器系统。
Rockwell Automation MicroLogix 1100 和 1400 存在安全漏洞，该漏洞源于HTTP 响应中未配置 X-Frame-Options 标头，攻击者利用该漏洞可以诱骗用户使用不受信任的网站。
solution:Upgrade rockwellautomation micrologix_1100_firmware to a higher version than *; Upgrade rockwellautomation micrologix_1400_firmware to a higher version than 21.007,and avoid the version (,21.007]