CVE-2022-1161

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-829

Affected software

VendorProductVersions
Rockwell Automation1768 CompactLogix controllersAll all
Rockwell Automation1769 CompactLogix controllersall
Rockwell AutomationCompactLogix 5370 controllersall
Rockwell AutomationCompactLogix 5380 controllersall
Rockwell AutomationCompactLogix 5480 controllersall
Rockwell AutomationCompact GuardLogix 5370 controllersall
Rockwell AutomationCompact GuardLogix 5380 controllersall
Rockwell AutomationControlLogix 5550 controllersall
Rockwell AutomationControlLogix 5560 controllersall
Rockwell AutomationControlLogix 5570 controllersall
Rockwell AutomationControlLogix 5580 controllersall
Rockwell AutomationGuardLogix 5560 controllersall
Rockwell AutomationGuardLogix 5570 controllersall
Rockwell AutomationGuardLogix 5580 controllersall
Rockwell AutomationFlexLogix 1794-L34 controllersall
Rockwell AutomationDriveLogix 5730 controllersall
Rockwell AutomationSoftLogix 5800 controllersall

References

Timeline

Published
Apr 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-11629.8A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE versions 14.7 priorCVE-2022-11634.8Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next.CVE-2022-11646.1The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search featureCVE-2022-11659.1The Blackhole for Bad Bots WordPress plugin before 3.3.2 uses headers such as CF-CONNECTING-IP, CLIENT-IP etc to determine the IP address ofCVE-2022-11665.3The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not include a default PHP CVE-2022-11676.1There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1, via the fiCVE-2022-11686.1There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1.CVE-2022-11696.1There is a XSS vulnerability in Careerfy.CVE-2022-11706.1In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search form is provided thCVE-2022-11716.1The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribCVE-2022-11725.0Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV.CVE-2022-11735.4stored xss in GitHub repository getgrav/grav prior to 1.7.33.
CVE-2022-1161: Critical severity, CVSS 9.8 | Vulnix