← CVE Intelligence

CVE-2022-1161

ICSA-22-090-05 Rockwell Automation Logix Controllers PUBLISHED

Description (CNA)

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Affected (CNA)

Vendor / productVersions
Rockwell Automation / 1768 CompactLogix controllersaffected All all
Rockwell Automation / 1769 CompactLogix controllersaffected all
Rockwell Automation / CompactLogix 5370 controllersaffected all
Rockwell Automation / CompactLogix 5380 controllersaffected all
Rockwell Automation / CompactLogix 5480 controllersaffected all
Rockwell Automation / Compact GuardLogix 5370 controllersaffected all
Rockwell Automation / Compact GuardLogix 5380 controllersaffected all
Rockwell Automation / ControlLogix 5550 controllersaffected all
Rockwell Automation / ControlLogix 5560 controllersaffected all
Rockwell Automation / ControlLogix 5570 controllersaffected all
Rockwell Automation / ControlLogix 5580 controllersaffected all
Rockwell Automation / GuardLogix 5560 controllersaffected all
Rockwell Automation / GuardLogix 5570 controllersaffected all
Rockwell Automation / GuardLogix 5580 controllersaffected all
Rockwell Automation / FlexLogix 1794-L34 controllersaffected all
Rockwell Automation / DriveLogix 5730 controllersaffected all
Rockwell Automation / SoftLogix 5800 controllersaffected all

CWE

CWE-829

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.