CVE-2022-1159— Rockwell Automation Studio 5000 Logix Designer Code Injection
Quick assessment
Affected
Rockwell Automation Studio 5000 Logix Designer
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Rockwell Automation Studio 5000 Logix Designer是美国Rockwell Automation公司的一个基于 Windows 的应用程序。用于为 PLC 构建程序。 Rockwell Automation Studio 5000 Logix Designer 存在代码注入漏洞。获得管理员访问权限的攻击者可能会向用户注入无法检测到的控制器代码。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-1159
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Rockwell Automation Studio 5000 Logix Designer Code Injection
Source: CVE Program / CVE List V5
Vulnerability Description
Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Rockwell Automation Studio 5000 Logix Designer 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Rockwell Automation Studio 5000 Logix Designer是美国Rockwell Automation公司的一个基于 Windows 的应用程序。用于为 PLC 构建程序。 Rockwell Automation Studio 5000 Logix Designer 存在代码注入漏洞。获得管理员访问权限的攻击者可能会向用户注入无法检测到的控制器代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rockwell Automation | Studio 5000 Logix Designer | All | - |
|
II. Public POCs for CVE-2022-1159
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-1159
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-1159 (1)
-
https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-07 x_refsource_CONFIRM
Same Patch Batch · Rockwell Automation · 2022-04-01 · 3 CVEs total
| CVE-2021-32960 | 8.5 HIGH | Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure |
| CVE-2022-1018 | 5.5 MEDIUM | ICSA-22-088-01 Rockwell Automation ISaGRAF |
IV. Related Vulnerabilities
Same vendor: Rockwell Automation
-
CVE-2026-75112
OTTO® Fleet Manager – Weak Password Hashing Configuration -
CVE-2026-12659
Rockwell Automation Flex 5000® Adapter - Denial of Service -
CVE-2026-9128
Studio 5000 Logix Designer® – Multiple Vulnerabilities -
CVE-2026-9636
Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / -
CVE-2026-9127
Studio 5000 Logix Designer® – Multiple Vulnerabilities
Same weakness: CWE-94
-
CVE-2026-78166
provectus kafka-ui Groovy Code MessagesController.java execu -
CVE-2026-76605
Joomla Extension - fabrikar.com - Remote code execution via -
CVE-2026-77992
Joomla Extension - fabrikar.com - heredoc terminator breakou -
CVE-2026-76604
Joomla Extension - fabrikar.com - Unauthenticated remote cod -
CVE-2026-3424
kk Star Ratings <= 5.4.10.3 - Unauthenticated Arbitrary Shor
V. Comments for CVE-2022-1159
No comments yet