CVE-2022-3156CWE-287

Rockwell Automation Studio 5000 Logix Emulate Vulnerable to a Remote Code Execution Vulnerability

High · published December 27, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software.  Users are granted elevated permissions on certain product services when the software is installed. Due to

this misconfiguration, a malicious user could potentially achieve remote code execution on the targeted software.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.2th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-12-27T18:17Z
EPSS history
Timeline
  • 27 DEC 18:17Z
    Rockwell Automation Studio 5000 Logix Emulate Vulnerable to a Remote Code Execution Vulnerability
    cvelistv5