Vulnerabilitycritical
CISA, Claroty warn of two vulnerabilities affecting industrial Rockwell products
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-1159 | Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio… | 7.2 | 3% | ||
| CVE-2022-1161 | An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems | 9.8 | 5% |
From the original article
3 min read at therecord.media
CISA on Thursday released two Industrial Controls Systems Advisories detailing vulnerabilities in Rockwell Automation products that could allow a threat actor to inject malicious code on an affected system. The advisories came alongside a report from security firm Claroty detailing CVE-2022-1161 and CVE-2022-1159, which carry CVSS scores of 10 and 7. 7 respectively.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.