{"id":"CVE-2022-1161","aliases":["EUVD-2022-24503","GHSA-7mvq-cv2x-gv8r"],"status":"published","title":"ICSA-22-090-05 Rockwell Automation Logix Controllers","description":"An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.05213,"percentile":0.92568,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-829"],"published":"2022-04-11T19:38:14Z","modified":"2026-06-17T04:21:55Z","products":[{"vendor":"rockwell automation","product":"1768 compactlogix controllers"},{"vendor":"rockwell automation","product":"1769 compactlogix controllers"},{"vendor":"rockwell automation","product":"compact guardlogix 5370 controllers"},{"vendor":"rockwell automation","product":"compact guardlogix 5380 controllers"},{"vendor":"rockwell automation","product":"compactlogix 5370 controllers"},{"vendor":"rockwell automation","product":"compactlogix 5380 controllers"},{"vendor":"rockwell automation","product":"compactlogix 5480 controllers"},{"vendor":"rockwell automation","product":"controllogix 5550 controllers"},{"vendor":"rockwell automation","product":"controllogix 5560 controllers"},{"vendor":"rockwell automation","product":"controllogix 5570 controllers"},{"vendor":"rockwell automation","product":"controllogix 5580 controllers"},{"vendor":"rockwell automation","product":"drivelogix 5730 controllers"},{"vendor":"rockwell automation","product":"flexlogix 1794-l34 controllers"},{"vendor":"rockwell automation","product":"guardlogix 5560 controllers"},{"vendor":"rockwell automation","product":"guardlogix 5570 controllers"},{"vendor":"rockwell automation","product":"guardlogix 5580 controllers"},{"vendor":"rockwell automation","product":"softlogix 5800 controllers"},{"vendor":"rockwellautomation","product":"compact_guardlogix_5370_firmware"},{"vendor":"rockwellautomation","product":"compact_guardlogix_5380_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_1768-l43_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_1768-l45_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_1769-l31_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_1769-l32c_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_1769-l32e_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_1769-l35cr_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_1769-l35e_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_5370_l1_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_5370_l2_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_5370_l3_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_5380_firmware"},{"vendor":"rockwellautomation","product":"compactlogix_5480_firmware"},{"vendor":"rockwellautomation","product":"controllogix_5550_firmware"},{"vendor":"rockwellautomation","product":"controllogix_5560_firmware"},{"vendor":"rockwellautomation","product":"controllogix_5570_firmware"},{"vendor":"rockwellautomation","product":"controllogix_5580_firmware"},{"vendor":"rockwellautomation","product":"drivelogix_5730_firmware"},{"vendor":"rockwellautomation","product":"flexlogix_1794-l34_firmware"},{"vendor":"rockwellautomation","product":"guardlogix_5560_firmware"},{"vendor":"rockwellautomation","product":"guardlogix_5570_firmware"},{"vendor":"rockwellautomation","product":"guardlogix_5580_firmware"},{"vendor":"rockwellautomation","product":"softlogix_5800_firmware"}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-05","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1161"},{"url":"https://github.com/advisories/GHSA-7mvq-cv2x-gv8r"}],"sources":{"cve":[{"id":"CVE-2022-1161","title":"ICSA-22-090-05 Rockwell Automation Logix Controllers","description":"An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.","status":"published","published":"2022-04-11T19:38:14.725Z","modified":"2025-04-16T16:31:12.359Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:34:38.922686Z"}],"euvd":[{"id":"EUVD-2022-24503","description":"An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.","status":"published","published":"2022-04-11T19:38:14Z","modified":"2025-04-16T16:31:12Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:23.922531Z"}],"ghsa":[{"id":"GHSA-7mvq-cv2x-gv8r","title":"An attacker with the ability to modify a user program may change user program code on some...","description":"An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.","status":"published","published":"2022-04-12T00:00:32Z","modified":"2023-01-27T05:01:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:41:55.318028Z"}],"nvd":[{"id":"CVE-2022-1161","description":"An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.","status":"published","published":"2022-04-11T20:15:18.017Z","modified":"2026-06-17T04:21:55.71Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:07:15.414503Z"}]}}