CVE-2022-1161 ICSA-22-090-05 Rockwell Automation Logix Controllers

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to chang...

CVE-2022-1161

CVE-2022-1161 affects Rockwell Automation’s Logix platforms (ControlLogix, CompactLogix, GuardLogix) via Studio 5000 Logix Designer. The root cause is that Studio 5000 writes user‑readable program code to a separate location from the executed compiled code, enabling an attacker to modify one copy...

Code injection

Rockwell Automation Studio 5000 Logix Designer all versions are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user...

CVE-2022-26419 Rockwell Automation Studio 5000 Logix Designer Code Injection

Omron CX-Position versions 2.5.3 and prior is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code...

CVE-2022-26022 Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write

Omron CX-Position versions 2.5.3 and prior is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code...

CVE-2022-26022 Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write

Omron CX-Position versions 2.5.3 and prior is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code...

CVE-2022-26417 Rockwell Automation Studio 5000 Logix Designer Use After Free

Omron CX-Position versions 2.5.3 and prior is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arbitrary code...

CVE-2022-1159 Rockwell Automation Studio 5000 Logix Designer Code Injection

Rockwell Automation Studio 5000 Logix Designer all versions are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user...

CVE-2022-1159 Rockwell Automation Studio 5000 Logix Designer Code Injection

Rockwell Automation Studio 5000 Logix Designer all versions are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user...

CVE-2022-1159

CVE-2022-1159 affects Rockwell Automation Studio 5000 Logix Designer (all versions). The vulnerability allows an attacker who has administrator access on a workstation running Studio 5000 Logix Designer to inject controller code undetectable to a user, potentially modifying the PLC’s behavior and...

PT-2022-2353 · Rockwell Automation · Compactlogix 5480 +5

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Studio 5000 Logix Designer all versions ControlLogix 5580 affected versions not specified GuardLogix 5580 affected versions not specified CompactLogix 5380 affected versions not specified CompactLogix 5480 affected version...

Rockwell Automation Studio 5000 Logix Designer 代码注入漏洞

Rockwell Automation Studio 5000 Logix Designer is a Windows-based application from Rockwell Automation, Inc. It is used to build programs for PLCs. A code injection vulnerability exists in Rockwell Automation Studio 5000 Logix Designer. An attacker with administrator access could inject...

PT-2022-2065 · Rockwell Automation · Flexlogix +6

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ControlLogix, CompactLogix, and GuardLogix Control systems affected versions not specified Rockwell Automation FlexLogix, DriveLogix, and SoftLogix affected versions not specified Description: The issue allows an attacker ...

Rockwell Automation Studio 5000 Logix Designer

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: Studio 5000 Logix Designer Vulnerability: Code Injection 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to download a modified program to the...

Rockwell Automation Logix Controllers 安全漏洞

Rockwell Automation Logix Controllers is a high-performance control platform from Rockwell Automation. Use this single platform to perform sequence, process, drive, or motion control in any combination. A security vulnerability exists in Rockwell Automation Logix Controllers that originates from...

Rockwellautomation Rslogix Insufficiently Protected Credentials

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...

Rockwellautomation Rslinx Improper Input Validation

FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 an...

CVE-2021-22681

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...

Design/Logic Flaw

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...

CVE-2021-22681

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730,...