CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-1161
Critical (9.8) in rockwellautomation. EPSS 5.2% chance of exploitation in the next 30 days.
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
Severity
- EPSS
- 5.2% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-829
- Published
- Modified
- Record from
- the NVD, synced
Affected
- rockwellautomation:compact_guardlogix_5370_firmware
- rockwellautomation:compact_guardlogix_5380_firmware
- rockwellautomation:compactlogix_1768-l43_firmware
- rockwellautomation:compactlogix_1768-l45_firmware
- rockwellautomation:compactlogix_1769-l31_firmware
- rockwellautomation:compactlogix_1769-l32c_firmware
- rockwellautomation:compactlogix_1769-l32e_firmware
- rockwellautomation:compactlogix_1769-l35cr_firmware
- rockwellautomation:compactlogix_1769-l35e_firmware
- rockwellautomation:compactlogix_5370_l1_firmware
- rockwellautomation:compactlogix_5370_l2_firmware
- rockwellautomation:compactlogix_5370_l3_firmware
- rockwellautomation:compactlogix_5380_firmware
- rockwellautomation:compactlogix_5480_firmware
- rockwellautomation:controllogix_5550_firmware
- rockwellautomation:controllogix_5560_firmware
- rockwellautomation:controllogix_5570_firmware
- rockwellautomation:controllogix_5580_firmware
- rockwellautomation:drivelogix_5730_firmware
- rockwellautomation:flexlogix_1794-l34_firmware
- rockwellautomation:guardlogix_5560_firmware
- rockwellautomation:guardlogix_5570_firmware
- rockwellautomation:guardlogix_5580_firmware
- rockwellautomation:softlogix_5800_firmware