Description
The X-Frame-Options header in Rockwell Automation MicroLogix 1100/1400 Versions 21.007 and prior is not configured in the HTTP response, which could allow clickjacking attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | MicroLogix 1400 | unspecified – ≤ 21.007 | — |
| Rockwell Automation | MicroLogix 1100 | All versions | — |
Advisories 1
- ICSA-22-188-01 Rockwell Automation MicroLogix CISA ICS & IT advisories · Jul 7, 2022