CVE-2022-1161
ICSA-22-090-05 Rockwell Automation Logix Controllers
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
ICSA-22-090-05 Rockwell Automation Logix Controllers
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
- Record
CVE-2022-1161- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-829
- Updated
- 2026-11-02
EUVDEUVD-2022-24503
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
- Record
EUVD-2022-24503- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7mvq-cv2x-gv8r
An attacker with the ability to modify a user program may change user program code on some...
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
- Record
GHSA-7mvq-cv2x-gv8r- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-829
- Updated
- 2026-11-02
NVD
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
- Record
CVE-2022-1161- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-829
- Updated
- 2026-11-02
Affected products
- rockwell automation 1768 compactlogix controllers
- rockwell automation 1769 compactlogix controllers
- rockwell automation compact guardlogix 5370 controllers
- rockwell automation compact guardlogix 5380 controllers
- rockwell automation compactlogix 5370 controllers
- rockwell automation compactlogix 5380 controllers
- rockwell automation compactlogix 5480 controllers
- rockwell automation controllogix 5550 controllers
- rockwell automation controllogix 5560 controllers
- rockwell automation controllogix 5570 controllers
- rockwell automation controllogix 5580 controllers
- rockwell automation drivelogix 5730 controllers
Show 29 moreShow less
- rockwell automation flexlogix 1794-l34 controllers
- rockwell automation guardlogix 5560 controllers
- rockwell automation guardlogix 5570 controllers
- rockwell automation guardlogix 5580 controllers
- rockwell automation softlogix 5800 controllers
- rockwellautomation compact guardlogix 5370 firmware
- rockwellautomation compact guardlogix 5380 firmware
- rockwellautomation compactlogix 1768-l43 firmware
- rockwellautomation compactlogix 1768-l45 firmware
- rockwellautomation compactlogix 1769-l31 firmware
- rockwellautomation compactlogix 1769-l32c firmware
- rockwellautomation compactlogix 1769-l32e firmware
- rockwellautomation compactlogix 1769-l35cr firmware
- rockwellautomation compactlogix 1769-l35e firmware
- rockwellautomation compactlogix 5370 l1 firmware
- rockwellautomation compactlogix 5370 l2 firmware
- rockwellautomation compactlogix 5370 l3 firmware
- rockwellautomation compactlogix 5380 firmware
- rockwellautomation compactlogix 5480 firmware
- rockwellautomation controllogix 5550 firmware
- rockwellautomation controllogix 5560 firmware
- rockwellautomation controllogix 5570 firmware
- rockwellautomation controllogix 5580 firmware
- rockwellautomation drivelogix 5730 firmware
- rockwellautomation flexlogix 1794-l34 firmware
- rockwellautomation guardlogix 5560 firmware
- rockwellautomation guardlogix 5570 firmware
- rockwellautomation guardlogix 5580 firmware
- rockwellautomation softlogix 5800 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-1161 is a critical vulnerability (CVSS 10.0) in Rockwell Automation 1768 Compactlogix Controllers, published April 11, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.21%, the 92nd percentile. No source names a fixed version.