CVE-2021-22681: Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this vulnerability, an unauthorized user would require network access to the controller.
Other sources
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-22681?
CVE-2021-22681 is a vulnerability in Rockwell Automation Studio 5000 Logix Designer and RSLogix 5000 that allows unauthorized access to Logix controllers.
What is the severity of CVE-2021-22681?
CVE-2021-22681 has a severity rating of 9.8 (Critical).
Which versions of Rockwell Automation Studio 5000 Logix Designer are affected?
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later are affected by CVE-2021-22681.
Which versions of RSLogix 5000 are affected?
RSLogix 5000 Versions 16 through 20 are affected by CVE-2021-22681.
How can I fix CVE-2021-22681?
Apply the necessary patches and updates provided by Rockwell Automation to fix CVE-2021-22681.