CVE-2022-1161
Critical
Description
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
SeverityCritical
CVSS10.0
Exploit probability—
ProductRockwellautomation Compactlogix 1768-l43 Firmware
PublishedApr 11, 2022
First seenApr 11, 2022
Weakness typeCWE-829CWE-829
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation compactlogix_1768-l43_firmware | No range specified | — |
| rockwellautomation compactlogix_1768-l45_firmware | No range specified | — |
| rockwellautomation compactlogix_1769-l31_firmware | No range specified | — |
| rockwellautomation compactlogix_1769-l32c_firmware | No range specified | — |
| rockwellautomation compactlogix_1769-l32e_firmware | No range specified | — |
| rockwellautomation compactlogix_1769-l35cr_firmware | No range specified | — |
| rockwellautomation compactlogix_1769-l35e_firmware | No range specified | — |
| rockwellautomation compactlogix_5370_l3_firmware | No range specified | — |
| rockwellautomation compactlogix_5370_l2_firmware | No range specified | — |
| rockwellautomation compactlogix_5370_l1_firmware | No range specified | — |
| rockwellautomation compactlogix_5380_firmware | No range specified | — |
| rockwellautomation compactlogix_5480_firmware | No range specified | — |
| rockwellautomation compact_guardlogix_5370_firmware | No range specified | — |
| rockwellautomation compact_guardlogix_5380_firmware | No range specified | — |
| rockwellautomation controllogix_5550_firmware | No range specified | — |
| rockwellautomation controllogix_5560_firmware | No range specified | — |
| rockwellautomation controllogix_5570_firmware | No range specified | — |
| rockwellautomation controllogix_5580_firmware | No range specified | — |
| rockwellautomation guardlogix_5560_firmware | No range specified | — |
| rockwellautomation guardlogix_5570_firmware | No range specified | — |
| rockwellautomation guardlogix_5580_firmware | No range specified | — |
| rockwellautomation flexlogix_1794-l34_firmware | No range specified | — |
| rockwellautomation drivelogix_5730_firmware | No range specified | — |
| rockwellautomation softlogix_5800_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.