← Database

CVE-2022-1161

CRITICAL CVSS: 10.0 Published: 2022-04-11 Modified: 2026-06-17

Description

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Affected Platforms

Rockwellautomation Compactlogix 1769-L35Cr FirmwareRockwellautomation Compactlogix 1769-L35CrRockwellautomation Softlogix 5800 FirmwareRockwellautomation Guardlogix 5560 FirmwareRockwellautomation Compactlogix 5380 FirmwareRockwellautomation Compact Guardlogix 5380Rockwellautomation Compactlogix 1768-L43Rockwellautomation Compact Guardlogix 5370Rockwellautomation Guardlogix 5570 FirmwareRockwellautomation Controllogix 5580 Firmware

Weakness Type

CWE-829

References