CVE-2022-1161: Rockwell Automation 1768 CompactLogix controllers

Описание

Оригинално описание

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Засегнати продукти

• Rockwell Automation 1768 CompactLogix controllers: All all
• Rockwell Automation 1769 CompactLogix controllers: all
• Rockwell Automation CompactLogix 5370 controllers: all
• Rockwell Automation CompactLogix 5380 controllers: all
• Rockwell Automation CompactLogix 5480 controllers: all
• Rockwell Automation Compact GuardLogix 5370 controllers: all
• Rockwell Automation Compact GuardLogix 5380 controllers: all
• Rockwell Automation ControlLogix 5550 controllers: all
• Rockwell Automation ControlLogix 5560 controllers: all
• Rockwell Automation ControlLogix 5570 controllers: all
• Rockwell Automation ControlLogix 5580 controllers: all
• Rockwell Automation GuardLogix 5560 controllers: all
• Rockwell Automation GuardLogix 5570 controllers: all
• Rockwell Automation GuardLogix 5580 controllers: all
• Rockwell Automation FlexLogix 1794-L34 controllers: all
• Rockwell Automation DriveLogix 5730 controllers: all
• Rockwell Automation SoftLogix 5800 controllers: all

Вид слабост

• CWE-829 Inclusion of Functionality from Untrusted Control Sphere

История

Други уязвимости в Rockwell Automation 1768 CompactLogix controllers

• 8.7CVE-2024-8626
• 5.8CVE-2020-6998
• 6.8CVE-2022-1797
• CVE-2019-10952
• CVE-2019-10954

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-1161
• https://nvd.nist.gov/vuln/detail/CVE-2022-1161
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-05