CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22681

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.154

EPSS Ranking 94.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

Proposed Action

Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this vulnerability, an unauthorized user would require network access to the controller.

Ransomware Campaign

Unknown

References

Products affected by CVE-2021-22681

Rockwellautomation » Factorytalk Services Platform » Version: 2.51.00.8

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:2.51.00.8
Rockwellautomation » Factorytalk Services Platform » Version: 2.61

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:2.61
Rockwellautomation » Factorytalk Services Platform » Version: 2.71

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:2.71
Rockwellautomation » Factorytalk Services Platform » Version: 2.73

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:2.73
Rockwellautomation » Factorytalk Services Platform » Version: 2.74

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:2.74
Rockwellautomation » Factorytalk Services Platform » Version: 2.80

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:2.80
Rockwellautomation » Factorytalk Services Platform » Version: 2.90

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:2.90
Rockwellautomation » Factorytalk Services Platform » Version: 6.10.00

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:6.10.00
Rockwellautomation » Factorytalk Services Platform » Version: 6.11.00

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:6.11.00
Rockwellautomation » Factorytalk Services Platform » Version: 6.31.00

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:6.31.00
Rockwellautomation » Factorytalk Services Platform » Version: cpr9

cpe:2.3:a:rockwellautomation:factorytalk_services_platform:cpr9
Rockwellautomation » Rslogix 5000 » Version: Any

cpe:2.3:a:rockwellautomation:rslogix_5000:*
Rockwellautomation » Studio 5000 Logix Designer » Version: 32.0

cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.0
Rockwellautomation » Studio 5000 Logix Designer » Version: 32.00

cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.00
Rockwellautomation » Studio 5000 Logix Designer » Version: 32.01

cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.01
Rockwellautomation » Studio 5000 Logix Designer » Version: 32.02

cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:32.02
Rockwellautomation » Studio 5000 Logix Designer » Version: 33.00

cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:33.00
Rockwellautomation » Compact Guardlogix 5370 » Version: N/A

cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-
Rockwellautomation » Compact Guardlogix 5380 » Version: N/A

cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-
Rockwellautomation » Compactlogix 1768 » Version: N/A

cpe:2.3:h:rockwellautomation:compactlogix_1768:-
Rockwellautomation » Compactlogix 1769 » Version: N/A

cpe:2.3:h:rockwellautomation:compactlogix_1769:-
Rockwellautomation » Compactlogix 5370 » Version: N/A

cpe:2.3:h:rockwellautomation:compactlogix_5370:-
Rockwellautomation » Compactlogix 5380 » Version: N/A

cpe:2.3:h:rockwellautomation:compactlogix_5380:-
Rockwellautomation » Compactlogix 5480 » Version: N/A

cpe:2.3:h:rockwellautomation:compactlogix_5480:-
Rockwellautomation » Controllogix 5550 » Version: N/A

cpe:2.3:h:rockwellautomation:controllogix_5550:-
Rockwellautomation » Controllogix 5560 » Version: N/A

cpe:2.3:h:rockwellautomation:controllogix_5560:-
Rockwellautomation » Controllogix 5570 » Version: N/A

cpe:2.3:h:rockwellautomation:controllogix_5570:-
Rockwellautomation » Controllogix 5580 » Version: N/A

cpe:2.3:h:rockwellautomation:controllogix_5580:-
Rockwellautomation » Drivelogix 1794-L34 » Version: N/A

cpe:2.3:h:rockwellautomation:drivelogix_1794-l34:-
Rockwellautomation » Drivelogix 5560 » Version: N/A

cpe:2.3:h:rockwellautomation:drivelogix_5560:-
Rockwellautomation » Drivelogix 5730 » Version: N/A

cpe:2.3:h:rockwellautomation:drivelogix_5730:-
Rockwellautomation » Guardlogix 5570 » Version: N/A

cpe:2.3:h:rockwellautomation:guardlogix_5570:-
Rockwellautomation » Guardlogix 5580 » Version: N/A

cpe:2.3:h:rockwellautomation:guardlogix_5580:-
Rockwellautomation » Softlogix 5800 » Version: N/A

cpe:2.3:h:rockwellautomation:softlogix_5800:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22681

Products

Pricing

Contact Us