by Kastro
Paper/Archive/CVE-2021-22681

CVE-2021-22681

Rockwell Multiple Products — Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

KEV · due 26 MarEPSS 64%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.2.992 × 2019.8Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.

Affected

ProductAffectedFixed inSource
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix ControllersRSLogix 5000 Versions 16 through 20–CNA
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix ControllersStudio 5000 Logix Designer: Versions 21 and later–CNA
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix ControllersCompactLogix 1768, 1769, 5370, 5380, 5480–CNA
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix ControllersControlLogix 5550, 5560, 5570, 5580–CNA
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix ControllersDriveLogix 5560, 5730, 1794-L34–CNA
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix ControllersCompact GuardLogix 5370, 5380–CNA
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix ControllersGuardLogix 5570, 5580–CNA
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix ControllersSoftLogix 5800–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refus-cert.cisa.gov/ics/advisories/icsa-21-056-03refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22681kevcisa.gov/known-exploited-vulnerabilities-catalog