CVE-2022-1161
ICSA-22-090-05 Rockwell Automation Logix Controllers
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
Un atacante con la capacidad de modificar un programa de usuario puede cambiar el código del programa de usuario en algunos sistemas ControlLogix, CompactLogix y GuardLogix Control. Studio 5000 Logix Designer escribe el código del programa legible por el usuario en una ubicación distinta a la del código compilado ejecutado, permitiendo a un atacante cambiar uno y no el otro
*Credits:
Sharon Brizinov and Tal Keren of Claroty reported this vulnerability to CISA.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-03-29 CVE Reserved
- 2022-04-11 CVE Published
- 2024-09-16 CVE Updated
- 2024-11-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-829: Inclusion of Functionality from Untrusted Control Sphere
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-05 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1768-l43 Firmware Search vendor "Rockwellautomation" for product "Compactlogix 1768-l43 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1768-l43 Search vendor "Rockwellautomation" for product "Compactlogix 1768-l43" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1768-l45 Firmware Search vendor "Rockwellautomation" for product "Compactlogix 1768-l45 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1768-l45 Search vendor "Rockwellautomation" for product "Compactlogix 1768-l45" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l31 Firmware Search vendor "Rockwellautomation" for product "Compactlogix 1769-l31 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l31 Search vendor "Rockwellautomation" for product "Compactlogix 1769-l31" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l32c Firmware Search vendor "Rockwellautomation" for product "Compactlogix 1769-l32c Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l32c Search vendor "Rockwellautomation" for product "Compactlogix 1769-l32c" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l32e Firmware Search vendor "Rockwellautomation" for product "Compactlogix 1769-l32e Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l32e Search vendor "Rockwellautomation" for product "Compactlogix 1769-l32e" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l35cr Firmware Search vendor "Rockwellautomation" for product "Compactlogix 1769-l35cr Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l35cr Search vendor "Rockwellautomation" for product "Compactlogix 1769-l35cr" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l35e Firmware Search vendor "Rockwellautomation" for product "Compactlogix 1769-l35e Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 1769-l35e Search vendor "Rockwellautomation" for product "Compactlogix 1769-l35e" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5370 L3 Firmware Search vendor "Rockwellautomation" for product "Compactlogix 5370 L3 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5370 L3 Search vendor "Rockwellautomation" for product "Compactlogix 5370 L3" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5370 L2 Firmware Search vendor "Rockwellautomation" for product "Compactlogix 5370 L2 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5370 L2 Search vendor "Rockwellautomation" for product "Compactlogix 5370 L2" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5370 L1 Firmware Search vendor "Rockwellautomation" for product "Compactlogix 5370 L1 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5370 L1 Search vendor "Rockwellautomation" for product "Compactlogix 5370 L1" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5380 Firmware Search vendor "Rockwellautomation" for product "Compactlogix 5380 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5380 Search vendor "Rockwellautomation" for product "Compactlogix 5380" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5480 Firmware Search vendor "Rockwellautomation" for product "Compactlogix 5480 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compactlogix 5480 Search vendor "Rockwellautomation" for product "Compactlogix 5480" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compact Guardlogix 5370 Firmware Search vendor "Rockwellautomation" for product "Compact Guardlogix 5370 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compact Guardlogix 5370 Search vendor "Rockwellautomation" for product "Compact Guardlogix 5370" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Compact Guardlogix 5380 Firmware Search vendor "Rockwellautomation" for product "Compact Guardlogix 5380 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Compact Guardlogix 5380 Search vendor "Rockwellautomation" for product "Compact Guardlogix 5380" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Controllogix 5550 Firmware Search vendor "Rockwellautomation" for product "Controllogix 5550 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Controllogix 5550 Search vendor "Rockwellautomation" for product "Controllogix 5550" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Controllogix 5560 Firmware Search vendor "Rockwellautomation" for product "Controllogix 5560 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Controllogix 5560 Search vendor "Rockwellautomation" for product "Controllogix 5560" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Controllogix 5570 Firmware Search vendor "Rockwellautomation" for product "Controllogix 5570 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Controllogix 5570 Search vendor "Rockwellautomation" for product "Controllogix 5570" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Controllogix 5580 Firmware Search vendor "Rockwellautomation" for product "Controllogix 5580 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Controllogix 5580 Search vendor "Rockwellautomation" for product "Controllogix 5580" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Guardlogix 5560 Firmware Search vendor "Rockwellautomation" for product "Guardlogix 5560 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Guardlogix 5560 Search vendor "Rockwellautomation" for product "Guardlogix 5560" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Guardlogix 5570 Firmware Search vendor "Rockwellautomation" for product "Guardlogix 5570 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Guardlogix 5570 Search vendor "Rockwellautomation" for product "Guardlogix 5570" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Guardlogix 5580 Firmware Search vendor "Rockwellautomation" for product "Guardlogix 5580 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Guardlogix 5580 Search vendor "Rockwellautomation" for product "Guardlogix 5580" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Flexlogix 1794-l34 Firmware Search vendor "Rockwellautomation" for product "Flexlogix 1794-l34 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Flexlogix 1794-l34 Search vendor "Rockwellautomation" for product "Flexlogix 1794-l34" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Drivelogix 5730 Firmware Search vendor "Rockwellautomation" for product "Drivelogix 5730 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Drivelogix 5730 Search vendor "Rockwellautomation" for product "Drivelogix 5730" | - | - |
Safe
|
| Rockwellautomation Search vendor "Rockwellautomation" | Softlogix 5800 Firmware Search vendor "Rockwellautomation" for product "Softlogix 5800 Firmware" | * | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Softlogix 5800 Search vendor "Rockwellautomation" for product "Softlogix 5800" | - | - |
Safe
|