CVE-2022-1159

—

CVSS 3.1

7.2 high

EPSS

3%p88

Published

Apr 1, 2022 (Apr 1, 2022)

Modified

Jun 17, 2026

Description

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.

Vendors: rockwellautomation
Products: controllogix 5580 firmware, guardlogix 5580 firmware, compactlogix 5380 firmware, compactlogix 5480 firmware, compact guardlogix 5380 firmware
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news4 stories

Rockwell Advises Disconnecting Internet

The Hacker NewsMay 23, 03:38 UTC · May 23, 2024Vulnerability CVE-2021-22681 CVE-2022-1159 CVE-2023-3595+4 CVEs2

CISA, Claroty warn of two vulnerabilities affecting industrial Rockwell products

The RecordJan 17, 00:00 UTC · Jan 17, 2023Vulnerability CVE-2022-1161 CVE-2022-1159

Critical Bug in Siemens SIMATIC PLCs Could Let Attackers Steal Cryptographic Keys

The Hacker NewsOct 12, 13:16 UTC · Oct 12, 2022Vulnerability CVE-2022-38465 CVE-2020-15782 CVE-2021-22681+2 CVEs

Critical Bugs in Rockwell PLC Could Allow Hackers to Implant Malicious Code

The Hacker NewsApr 1, 12:31 UTC · Apr 1, 2022Vulnerability CVE-2022-1161 CVE-2022-1159