VulnerabilityModified

CVE-2022-3156

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software.

HIGH 7.8EPSS 0.37%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.37%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution on the targeted software.

CVSS 3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.37% probability · 30th percentile
CISA KEV: Not listed
Weakness: CWE-287
Affected: rockwellautomation/studio 5000 logix emulate
Source: PSIRT@rockwellautomation.com

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137846Vendor Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137846Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.