CVE-2022-3156 - Rockwell Automation Studio 5000 Logix Emulate Vulnerable to a Remote Code Execution Vulnerability

Back Back to CVE browser

HIGH

Rockwell Automation Studio 5000 Logix Emulate Vulnerable to a Remote Code Execution Vulnerability

Published Dec 27, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.37%

Description

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution on the targeted software.

Affected products

Vendor Rockwell Automation Product Studio 5000 Logix Emulate Default
unaffected
- Version
  20.011
  Status
  affected
  Constraints
  <=33.011

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Rockwell Automation

Studio 5000 Logix Emulate

unaffected

Version	Status	Constraints
20.011	affected	<=33.011

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42580
Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137846
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42580		Advisory
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137846		Vendor Advisory