NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability2 · 1 read

CVE-2022-1159

CVSS 3.1: 7.2 high
EPSS: 3%p88
Published: Apr 1, 2022 · Apr 1, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-1159 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.

Vendors: rockwellautomation

Products: controllogix 5580 firmware, guardlogix 5580 firmware, compactlogix 5380 firmware, compactlogix 5480 firmware, compact guardlogix 5380 firmware

Weakness: CWE-94

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news

4 stories

Rockwell Advises Disconnecting Internet

The Hacker NewsMay 23, 03:38 UTC · May 23, 2024VulnerabilityCVE-2021-22681 CVE-2022-1159 CVE-2023-3595+44

60

CISA, Claroty warn of two vulnerabilities affecting industrial Rockwell products

The RecordJan 17, 00:00 UTC · Jan 17, 2023VulnerabilityCVE-2022-1161 CVE-2022-11592

60

Critical Bug in Siemens SIMATIC PLCs Could Let Attackers Steal Cryptographic Keys

The Hacker NewsOct 12, 13:16 UTC · Oct 12, 2022VulnerabilityCVE-2022-38465 CVE-2020-15782 CVE-2021-22681+22 · 1 read

60

Critical Bugs in Rockwell PLC Could Allow Hackers to Implant Malicious Code

The Hacker NewsApr 1, 12:31 UTC · Apr 1, 2022VulnerabilityCVE-2022-1161 CVE-2022-11593 · 1 read

60