Lucene search

[email protected]CVE-2021-22681

HistoryMar 03, 2021 - 6:15 p.m.

CVE-2021-22681

2021-03-0318:15:14

CWE-522

[email protected]

web.nvd.nist.gov

cve-2021-22681

rockwell automation studio 5000

logix designer

rslogix 5000

vulnerability

controllogix

compactlogix

guardlogix

softlogix

drivelogix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.

Affected configurations

NVD

Node

rockwellautomationcompact_guardlogix_5370Match-

rockwellautomationcompact_guardlogix_5380Match-

rockwellautomationcompactlogix_1768Match-

rockwellautomationcompactlogix_1769Match-

rockwellautomationcompactlogix_5370Match-

rockwellautomationcompactlogix_5380Match-

rockwellautomationcompactlogix_5480Match-

rockwellautomationcontrollogix_5550Match-

rockwellautomationcontrollogix_5560Match-

rockwellautomationcontrollogix_5570Match-

rockwellautomationcontrollogix_5580Match-

rockwellautomationdrivelogix_1794-l34Match-

rockwellautomationdrivelogix_5560Match-

rockwellautomationdrivelogix_5730Match-

rockwellautomationguardlogix_5570Match-

rockwellautomationguardlogix_5580Match-

rockwellautomationsoftlogix_5800Match-

AND

rockwellautomationfactorytalk_services_platformRange2.10≥

rockwellautomationrslogix_5000Range16–20

rockwellautomationstudio_5000_logix_designerRange21.0≥

CPENameOperatorVersion
rockwellautomation:factorytalk_services_platformrockwellautomation factorytalk services platformeq*
rockwellautomation:rslogix_5000rockwellautomation rslogix 5000le20
rockwellautomation:studio_5000_logix_designerrockwellautomation studio 5000 logix designereq*

CPE	Name	Operator	Version
rockwellautomation:factorytalk_services_platform	rockwellautomation factorytalk services platform	eq	*
rockwellautomation:rslogix_5000	rockwellautomation rslogix 5000	le	20
rockwellautomation:studio_5000_logix_designer	rockwellautomation studio 5000 logix designer	eq	*

CNA Affected

[
  {
    "product": "Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "RSLogix 5000 Versions 16 through 20"
      },
      {
        "status": "affected",
        "version": "Studio 5000 Logix Designer: Versions 21 and later"
      },
      {
        "status": "affected",
        "version": "CompactLogix 1768, 1769, 5370, 5380, 5480"
      },
      {
        "status": "affected",
        "version": "ControlLogix 5550, 5560, 5570, 5580"
      },
      {
        "status": "affected",
        "version": "DriveLogix 5560, 5730, 1794-L34"
      },
      {
        "status": "affected",
        "version": "Compact GuardLogix 5370, 5380"
      },
      {
        "status": "affected",
        "version": "GuardLogix 5570, 5580"
      },
      {
        "status": "affected",
        "version": "SoftLogix 5800"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-056-03

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

Related for CVE-2021-22681

nessus2 nvd1 prion1 cvelist1 ics1 thn1