ICSA-22-090-05

icsaUScisa_csaf_ot

Rockwell Automation Logix Controllers

Advisory ansehen veröffentlicht 2022-03-31

Successful exploitation of this vulnerability may allow an attacker to modify user programs. A user could then unknowingly download those modified elements containing malicious code.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-1161UScritical9.8—
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer wr…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (17)

  • Mitigation1768 CompactLogix controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • Mitigation1769 CompactLogix controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationCompact GuardLogix 5370 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationCompact GuardLogix 5380 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationCompactLogix 5370 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationCompactLogix 5380 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationCompactLogix 5480 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationControlLogix 5550 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationControlLogix 5560 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationControlLogix 5570 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationControlLogix 5580 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationDriveLogix 5730 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationFlexLogix 1794-L34 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationGuardLogix 5560 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationGuardLogix 5570 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationGuardLogix 5580 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

  • MitigationSoftLogix 5800 controllers

    CompactLogix 5380 using on-board EtherNet/IP port.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan