CVE-2022-1159CWE-94

Rockwell Automation Studio 5000 Logix Designer Code Injection

High · published April 1, 2022

CVSS v3.1
7.7
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03450 · 88.9th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2022-04-01T22:17Z
EPSS history
Timeline
  • 01 APR 22:17Z
    Rockwell Automation Studio 5000 Logix Designer Code Injection
    cvelistv5