Vulnerability · Published Apr 11, 2022 · Assigned by icscert
CVE-2022-1161ICSA-22-090-05 Rockwell Automation Logix Controllers
Critical 10.0
In plain English
A critical-severity security flaw in 1768 CompactLogix controllers from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 5.2% (higher than 93% of all known vulnerabilities).
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)5.2%top 7.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
Affected products (as reported)
Weakness: CWE-829 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-05 x_refsource_MISC