rewindex

RewindexCVEs

CVE-2021-22681: Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

Critical · CVSS 9.8 (CVSS 3.1)KEV known exploitedEPSS 63.6%, 99th percentilePublished Updated Assigner: icscert

In CISA’s Known Exploited Vulnerabilities catalog: Rockwell Multiple Products Insufficient Protected Credentials Vulnerability.

Added , federal remediation due . Known ransomware use: Unknown.

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-522

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers

References

All CVEsMarkdownJSON