CVE-2022-116110.0CriticalCWE-829

CVE-2022-1161: ICSA-22-090-05 Rockwell Automation Logix Controllers

Rockwell Automation · 1768 CompactLogix controllers

Affected: Rockwell Automation 1768 CompactLogix controllers · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

5.2%probability of exploitation in the next 30 days

92nd percentile

050100

Higher than 92% of scored CVEs

10.0CriticalCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Affected products17

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Rockwell Automation · 1768 CompactLogix controllersAll all
Rockwell Automation · 1769 CompactLogix controllersall
Rockwell Automation · CompactLogix 5370 controllersall
Rockwell Automation · CompactLogix 5380 controllersall
Rockwell Automation · CompactLogix 5480 controllersall
Rockwell Automation · Compact GuardLogix 5370 controllersall
Rockwell Automation · Compact GuardLogix 5380 controllersall
Rockwell Automation · ControlLogix 5550 controllersall
Rockwell Automation · ControlLogix 5560 controllersall
Rockwell Automation · ControlLogix 5570 controllersall
Rockwell Automation · ControlLogix 5580 controllersall
Rockwell Automation · GuardLogix 5560 controllersall
Rockwell Automation · GuardLogix 5570 controllersall
Rockwell Automation · GuardLogix 5580 controllersall
Rockwell Automation · FlexLogix 1794-L34 controllersall
Rockwell Automation · DriveLogix 5730 controllersall
Rockwell Automation · SoftLogix 5800 controllersall

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Inclusion of Functionality from Untrusted Control Sphere · Supply Chain and Malicious Code
Vendor: Rockwell Automation
Published: April 2022
Band: Possible (1 to 10%), April 2022

CoverageNo articles yet

No CyberSIXT article names CVE-2022-1161 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.