critical10.0
CVE-2022-1161
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems.
Impact
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Compactlogix 1768-L43 Firmware | All versions |
| Rockwellautomation | Compactlogix 1768-L45 Firmware | All versions |
| Rockwellautomation | Compactlogix 1769-L31 Firmware | All versions |
| Rockwellautomation | Compactlogix 1769-L32c Firmware | All versions |
| Rockwellautomation | Compactlogix 1769-L32e Firmware | All versions |
| Rockwellautomation | Compactlogix 1769-L35cr Firmware | All versions |
| Rockwellautomation | Compactlogix 1769-L35e Firmware | All versions |
| Rockwellautomation | Compactlogix 5370 L3 Firmware | All versions |
| Rockwellautomation | Compactlogix 5370 L2 Firmware | All versions |
| Rockwellautomation | Compactlogix 5370 L1 Firmware | All versions |
| Rockwellautomation | Compactlogix 5380 Firmware | All versions |
| Rockwellautomation | Compactlogix 5480 Firmware | All versions |