CVE-2022-1159 — Rockwell Automation Studio 5000 Logix Designer Code Injection

CVE-2022-1159

Rockwell Automation Studio 5000 Logix Designer Code Injection PUBLISHED

Description (CNA)

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / Studio 5000 Logix Designer	affected All

CWE

CWE-94

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-07

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-07

CISA-ADP

No English description supplied.

No references supplied.