by Kastro
Paper/Archive/CVE-2022-1161

CVE-2022-1161

Rockwell Automation 1768 CompactLogix controllers — ICSA-22-090-05 Rockwell Automation Logix Controllers

EPSS 5%CVSS 10.0
critical.is priorityof 100
49
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 92.5.925 × 2018.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Affected

ProductAffectedFixed inSource
1768 CompactLogix controllersAll all–CNA
1769 CompactLogix controllersall–CNA
CompactLogix 5370 controllersall–CNA
CompactLogix 5380 controllersall–CNA
CompactLogix 5480 controllersall–CNA
Compact GuardLogix 5370 controllersall–CNA
Compact GuardLogix 5380 controllersall–CNA
ControlLogix 5550 controllersall–CNA
ControlLogix 5560 controllersall–CNA
ControlLogix 5570 controllersall–CNA
ControlLogix 5580 controllersall–CNA
GuardLogix 5560 controllersall–CNA

Scores by source

icscert (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/uscert/ics/advisories/icsa-22-090-05