CVE-2021-22681

Published Mar 3, 2021

Last updated 3 years ago

Overview

Description: Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.
Source: ics-cert@hq.dhs.gov
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-522
ics-cert@hq.dhs.gov: CWE-522

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "6F951670-AF4D-4429-8BC1-79BDEF83B2C3"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "62414E65-73C7-4172-B7BF-F40A66AFBB90"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:compactlogix_1768:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2E5F100A-C8A3-49F2-B1D2-411432472B6B"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:compactlogix_1769:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F8A690BC-4D7C-4B83-A9F6-F860445028A2"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:compactlogix_5370:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E12ADAE3-97B1-48BC-BE69-ED75667C1886"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "EDD040ED-B44C-47D0-B4D4-729C378C4F68"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:compactlogix_5480:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "80F4F5BE-07DF-402A-BF98-34FBA6A11968"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:controllogix_5550:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "13EE2216-F25F-44AB-A167-4EEA153C8F8D"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:controllogix_5560:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "EA25FF8D-51C5-4928-9B90-E4BD1476F50B"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:controllogix_5570:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "482E2CD6-D484-486C-92F4-18432D107E30"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "51BB883B-B863-4D57-B1C0-FC7B3EBD1EA0"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:drivelogix_1794-l34:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "4A75A0FD-C337-4264-B1E4-96701851D6FA"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:drivelogix_5560:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "DFDAAA77-6964-44FC-9FFB-ECDF71665965"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:drivelogix_5730:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "03E185C3-17CA-4E3F-863B-9F906C5C59EA"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:guardlogix_5570:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "321AE938-192A-4342-8608-ADC81F0B6582"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:guardlogix_5580:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "006B7683-9FDF-4748-BA28-2EA22613E092"
          },
          {
            "criteria": "cpe:2.3:h:rockwellautomation:softlogix_5800:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "BDAB7B6D-CCAC-460B-8A88-3397A2397078"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6755FCF6-4A0C-478A-AEFF-54E35C45149D",
            "versionStartIncluding": "2.10"
          },
          {
            "criteria": "cpe:2.3:a:rockwellautomation:rslogix_5000:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "04C30129-3F03-4486-B181-EBDE29751372",
            "versionEndIncluding": "20",
            "versionStartIncluding": "16"
          },
          {
            "criteria": "cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9C840463-A11F-43A0-AA45-1AC810713AB6",
            "versionStartIncluding": "21.0"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Configurations

References