Unrated severityNVD Advisory· Published Apr 11, 2022· Updated Apr 16, 2025

ICSA-22-090-05 Rockwell Automation Logix Controllers

CVE-2022-1161

Description

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Affected products

Rockwellautomation/Compactlogix Controllersllm-fuzzy6 versions
(expand)+ 5 more
- (no CPE)
- (no CPE)range: All all
- (no CPE)range: all
- (no CPE)range: all
- (no CPE)range: all
- (no CPE)range: all
Rockwellautomation/Controllogixllm-fuzzy6 versions
(expand)+ 5 more
- (no CPE)
- (no CPE)range: all
- (no CPE)range: all
- (no CPE)range: all
- (no CPE)range: all
- (no CPE)range: all
Rockwellautomation/Guardlogixllm-fuzzy
Rockwellautomation/Guardlogix Controllerscpe-rescue5 versions
all+ 4 more
- (no CPE)range: all
- (no CPE)range: all
- (no CPE)range: all
- (no CPE)range: all
- (no CPE)range: all
Rockwellautomation/Flexlogix L34 Controller Firmwarecpe-rescue
Range: all
Rockwellautomation/Softlogix Controllerscpe-rescue
Range: all

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

ICSA-22-090-05 Rockwell Automation Logix Controllers

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions