CVE-2022-1161: Rockwellautomation Compact Guardlogix 5370 Firmware
Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days.
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.
Affected products
- Rockwellautomation Compact Guardlogix 5370 Firmware: any version
- Rockwellautomation Compact Guardlogix 5380 Firmware: any version
- Rockwellautomation Compactlogix 1768-l43 Firmware: any version
- Rockwellautomation Compactlogix 1768-l45 Firmware: any version
- Rockwellautomation Compactlogix 1769-l31 Firmware: any version
- Rockwellautomation Compactlogix 1769-l32c Firmware: any version
- Rockwellautomation Compactlogix 1769-l32e Firmware: any version
- Rockwellautomation Compactlogix 1769-l35cr Firmware: any version
- Rockwellautomation Compactlogix 1769-l35e Firmware: any version
- Rockwellautomation Compactlogix 5370 l1 Firmware: any version
- Rockwellautomation Compactlogix 5370 l2 Firmware: any version
- Rockwellautomation Compactlogix 5370 l3 Firmware: any version
- Rockwellautomation Compactlogix 5380 Firmware: any version
- Rockwellautomation Compactlogix 5480 Firmware: any version
- Rockwellautomation Controllogix 5550 Firmware: any version
- Rockwellautomation Controllogix 5560 Firmware: any version
- Rockwellautomation Controllogix 5570 Firmware: any version
- Rockwellautomation Controllogix 5580 Firmware: any version
- Rockwellautomation Drivelogix 5730 Firmware: any version
- Rockwellautomation Flexlogix 1794-l34 Firmware: any version
- Rockwellautomation Guardlogix 5560 Firmware: any version
- Rockwellautomation Guardlogix 5570 Firmware: any version
- Rockwellautomation Guardlogix 5580 Firmware: any version
- Rockwellautomation Softlogix 5800 Firmware: any version
Published 2022-04-11. Last modified 2026-06-17.