Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2022-1161

ICSA-22-090-05 Rockwell Automation Logix Controllers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation 1768 CompactLogix controllers

  • All allaffected

Rockwell Automation 1769 CompactLogix controllers

  • allaffected

Rockwell Automation CompactLogix 5370 controllers

  • allaffected

Rockwell Automation CompactLogix 5380 controllers

  • allaffected

Rockwell Automation CompactLogix 5480 controllers

  • allaffected

Rockwell Automation Compact GuardLogix 5370 controllers

  • allaffected

Rockwell Automation Compact GuardLogix 5380 controllers

  • allaffected

Rockwell Automation ControlLogix 5550 controllers

  • allaffected

Rockwell Automation ControlLogix 5560 controllers

  • allaffected

Rockwell Automation ControlLogix 5570 controllers

  • allaffected

Rockwell Automation ControlLogix 5580 controllers

  • allaffected

Rockwell Automation GuardLogix 5560 controllers

  • allaffected

Rockwell Automation GuardLogix 5570 controllers

  • allaffected

Rockwell Automation GuardLogix 5580 controllers

  • allaffected

Rockwell Automation FlexLogix 1794-L34 controllers

  • allaffected

Rockwell Automation DriveLogix 5730 controllers

  • allaffected

Rockwell Automation SoftLogix 5800 controllers

  • allaffected

References