CVE-2022-1161

rockwellautomation compactlogix 1768-l43 firmware, rockwellautomation compactlogix 1768-l45 firmware, rockwellautomation compactlogix 1769-l31 firmware +21 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-1161

Katalog CVE

CVSS 9.8 · Critical EPSS 5,2%

Kerentanan Inclusion of Functionality from Untrusted Control Sphere pada rockwellautomation compactlogix 1768-l43 firmware, rockwellautomation compactlogix 1768-l45 firmware +22 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Rincian

Terbit di NVD
11 April 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-829: Inclusion of Functionality from Untrusted Control Sphere
EPSS (30 hari)
5,2% peluang dieksploitasi; lebih tinggi dari 92,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
rockwellautomation compactlogix 1768-l43 firmware Semua versi
rockwellautomation compactlogix 1768-l45 firmware Semua versi
rockwellautomation compactlogix 1769-l31 firmware Semua versi
rockwellautomation compactlogix 1769-l32c firmware Semua versi
rockwellautomation compactlogix 1769-l32e firmware Semua versi
rockwellautomation compactlogix 1769-l35cr firmware Semua versi
rockwellautomation compactlogix 1769-l35e firmware Semua versi
rockwellautomation compactlogix 5370 l3 firmware Semua versi
rockwellautomation compactlogix 5370 l2 firmware Semua versi
rockwellautomation compactlogix 5370 l1 firmware Semua versi
rockwellautomation compactlogix 5380 firmware Semua versi
rockwellautomation compactlogix 5480 firmware Semua versi
rockwellautomation compact guardlogix 5370 firmware Semua versi
rockwellautomation compact guardlogix 5380 firmware Semua versi
rockwellautomation controllogix 5550 firmware Semua versi
rockwellautomation controllogix 5560 firmware Semua versi
rockwellautomation controllogix 5570 firmware Semua versi
rockwellautomation controllogix 5580 firmware Semua versi
rockwellautomation guardlogix 5560 firmware Semua versi
rockwellautomation guardlogix 5570 firmware Semua versi
rockwellautomation guardlogix 5580 firmware Semua versi
rockwellautomation flexlogix 1794-l34 firmware Semua versi
rockwellautomation drivelogix 5730 firmware Semua versi
rockwellautomation softlogix 5800 firmware Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.