ICSA-22-090-05

Rockwell Automation Logix Controllers

view advisory published 2022-03-31

Successful exploitation of this vulnerability may allow an attacker to modify user programs. A user could then unknowingly download those modified elements containing malicious code.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-1161US	critical9.8	5.21% (92nd)	—	2022-04-11
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer wr…

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-22-090-05 JSONself
ICS Advisory ICSA-22-090-05 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (17)

Mitigation1768 CompactLogix controllers
CompactLogix 5380 using on-board EtherNet/IP port.
Mitigation1769 CompactLogix controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompact GuardLogix 5370 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompact GuardLogix 5380 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompactLogix 5370 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompactLogix 5380 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompactLogix 5480 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationControlLogix 5550 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationControlLogix 5560 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationControlLogix 5570 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationControlLogix 5580 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationDriveLogix 5730 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationFlexLogix 1794-L34 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationGuardLogix 5560 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationGuardLogix 5570 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationGuardLogix 5580 controllers
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationSoftLogix 5800 controllers
CompactLogix 5380 using on-board EtherNet/IP port.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan