CVE-2022-1159

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.

Score

CVSS 3.1 7.7 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-04-01

Last modified

2025-04-16

Weaknesses

CWE-94

Affected products

• Studio 5000 Logix Designer (Rockwell Automation)
• Compact Guardlogix 5380 Firmware (Rockwellautomation)
• Compactlogix 5380 Firmware (Rockwellautomation)
• Compactlogix 5480 Firmware (Rockwellautomation)
• Controllogix 5580 Firmware (Rockwellautomation)
• Guardlogix 5580 Firmware (Rockwellautomation)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-07