CVE-2022-1159: Rockwellautomation Compact Guardlogix 5380 Firmware

High severity, CVSS 7.2. EPSS: 3.5% chance of exploitation in the next 30 days.

Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.

Affected products

• Rockwellautomation Compact Guardlogix 5380 Firmware: any version
• Rockwellautomation Compactlogix 5380 Firmware: any version
• Rockwellautomation Compactlogix 5480 Firmware: any version
• Rockwellautomation Controllogix 5580 Firmware: any version
• Rockwellautomation Guardlogix 5580 Firmware: any version

Published 2022-04-01. Last modified 2026-06-17.