CVE-2022-1161

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 11-04-2022 10:15

Last modified: - 18-04-2022 04:23

Total changes: - 3

Description

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

9.8

Base score

3.9

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=rockwellautomation AND product=compactlogix_1768-l43_firmware

vendor=rockwellautomation AND product=compactlogix_1768-l43 AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_1768-l45_firmware

vendor=rockwellautomation AND product=compactlogix_1768-l45 AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_1769-l31_firmware

vendor=rockwellautomation AND product=compactlogix_1769-l31 AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_1769-l32c_firmware

vendor=rockwellautomation AND product=compactlogix_1769-l32c AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_1769-l32e_firmware

vendor=rockwellautomation AND product=compactlogix_1769-l32e AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_1769-l35cr_firmware

vendor=rockwellautomation AND product=compactlogix_1769-l35cr AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_1769-l35e_firmware

vendor=rockwellautomation AND product=compactlogix_1769-l35e AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_5370_l3_firmware

vendor=rockwellautomation AND product=compactlogix_5370_l3 AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_5370_l2_firmware

vendor=rockwellautomation AND product=compactlogix_5370_l2 AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_5370_l1_firmware

vendor=rockwellautomation AND product=compactlogix_5370_l1 AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_5380_firmware

vendor=rockwellautomation AND product=compactlogix_5380 AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_5480_firmware

vendor=rockwellautomation AND product=compactlogix_5480 AND version=-

AND

vendor=rockwellautomation AND product=compact_guardlogix_5370_firmware

vendor=rockwellautomation AND product=compact_guardlogix_5370 AND version=-

AND

vendor=rockwellautomation AND product=compact_guardlogix_5380_firmware

vendor=rockwellautomation AND product=compact_guardlogix_5380 AND version=-

AND

vendor=rockwellautomation AND product=controllogix_5550_firmware

vendor=rockwellautomation AND product=controllogix_5550 AND version=-

AND

vendor=rockwellautomation AND product=controllogix_5560_firmware

vendor=rockwellautomation AND product=controllogix_5560 AND version=-

AND

vendor=rockwellautomation AND product=controllogix_5570_firmware

vendor=rockwellautomation AND product=controllogix_5570 AND version=-

AND

vendor=rockwellautomation AND product=controllogix_5580_firmware

vendor=rockwellautomation AND product=controllogix_5580 AND version=-

AND

vendor=rockwellautomation AND product=guardlogix_5560_firmware

vendor=rockwellautomation AND product=guardlogix_5560 AND version=-

AND

vendor=rockwellautomation AND product=guardlogix_5570_firmware

vendor=rockwellautomation AND product=guardlogix_5570 AND version=-

AND

vendor=rockwellautomation AND product=guardlogix_5580_firmware

vendor=rockwellautomation AND product=guardlogix_5580 AND version=-

AND

vendor=rockwellautomation AND product=flexlogix_1794-l34_firmware

vendor=rockwellautomation AND product=flexlogix_1794-l34 AND version=-

AND

vendor=rockwellautomation AND product=drivelogix_5730_firmware

vendor=rockwellautomation AND product=drivelogix_5730 AND version=-

AND

vendor=rockwellautomation AND product=softlogix_5800_firmware

vendor=rockwellautomation AND product=softlogix_5800 AND version=-

Reference

https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-05

Keywords

CVE-2022-1161

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-1161

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures