{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2022-3166",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2022-3166",
    "idYear": 2022,
    "status": "PUBLISHED",
    "publishedAt": "2022-12-16T19:59:25.261Z",
    "updatedAt": "2025-04-17T15:30:27.677Z",
    "importedAt": "2026-10-24T01:56:45.230Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack",
      "summary": "\nRockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device\n\n",
      "affected": [
        {
          "vendor": "Rockwell Automation",
          "product": "MicroLogix 1100",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "All",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Rockwell Automation",
          "product": "MicroLogix 1400-B/C",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "21.007 and below",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Rockwell Automation",
          "product": "MicroLogix 1400-A",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "7.000 and below",
              "status": "affected"
            }
          ]
        }
      ]
    }
  }
}