CVE-2022-1161

highPriorität · verfolgen · 41EPSS 0.052 · 92. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

5.21% (92nd) EPSS

CVSS 7.5 · high

Is it mine?

92 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-22

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

Mitigation1768 CompactLogix controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
Mitigation1769 CompactLogix controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompact GuardLogix 5370 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompact GuardLogix 5380 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompactLogix 5370 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompactLogix 5380 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationCompactLogix 5480 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationControlLogix 5550 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationControlLogix 5560 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationControlLogix 5570 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationControlLogix 5580 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationDriveLogix 5730 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationFlexLogix 1794-L34 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationGuardLogix 5560 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationGuardLogix 5570 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationGuardLogix 5580 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.
MitigationSoftLogix 5800 controllerscisa_csaf_ot
CompactLogix 5380 using on-board EtherNet/IP port.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

10.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–10

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.010criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · CISA US

v3.110criticalAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USAusnutzbarkeit 3.9 · Auswirkung 6

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-829USCWE-829USCWE-829US

betroffene Produkte (92)

Betroffene Produkte und Versionsbereiche.

Logix Controllers - 1768 CompactLogix controllersalle Versionencisa_csaf_otUS
Logix Controllers - 1769 CompactLogix controllersalle Versionencisa_csaf_otUS
Logix Controllers - Compact GuardLogix 5370 controllersalle Versionencisa_csaf_otUS
Logix Controllers - Compact GuardLogix 5380 controllersalle Versionencisa_csaf_otUS
Logix Controllers - CompactLogix 5370 controllersalle Versionencisa_csaf_otUS
Logix Controllers - CompactLogix 5380 controllersalle Versionencisa_csaf_otUS
Logix Controllers - CompactLogix 5480 controllersalle Versionencisa_csaf_otUS
Logix Controllers - ControlLogix 5550 controllersalle Versionencisa_csaf_otUS
Logix Controllers - ControlLogix 5560 controllersalle Versionencisa_csaf_otUS
Logix Controllers - ControlLogix 5570 controllersalle Versionencisa_csaf_otUS
Logix Controllers - ControlLogix 5580 controllersalle Versionencisa_csaf_otUS
Logix Controllers - DriveLogix 5730 controllersalle Versionencisa_csaf_otUS
Logix Controllers - FlexLogix 1794-L34 controllersalle Versionencisa_csaf_otUS
Logix Controllers - GuardLogix 5560 controllersalle Versionencisa_csaf_otUS
Logix Controllers - GuardLogix 5570 controllersalle Versionencisa_csaf_otUS
Logix Controllers - GuardLogix 5580 controllersalle Versionencisa_csaf_otUS
Logix Controllers - SoftLogix 5800 controllersalle Versionencisa_csaf_otUS
Rockwell Automation 1768 CompactLogix controllersalle Versionencisa_csaf_otUS
Rockwell Automation 1769 CompactLogix controllersalle Versionencisa_csaf_otUS
Rockwell Automation Compact GuardLogix 5370 controllersalle Versionencisa_csaf_otUS

20 von 92 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-22-090-05Rockwell Automation Logix Controllers2022-03-31icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability may allow an attacker to modify user programs. A user could then unknowingly download those modified elements containing malicious code.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2022-04-11geändert 2026-06-17

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan