CVE-2021-22681 : Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogi

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.

Published 2021-03-03 18:15:15

Updated 2022-04-25 16:16:26

Source ICS-CERT

View at NVD, CVE.org

Products affected by CVE-2021-22681

Rockwellautomation » Rslogix 5000
Versions from including (>=) 16 and up to, including, (<=) 20
cpe:2.3:a:rockwellautomation:rslogix_5000:*:*:*:*:*:*:*:*
Matching versions
When used together with: Rockwellautomation » Compact Guardlogix 5370 » Version: N/A
When used together with: Rockwellautomation » Compact Guardlogix 5380 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 1768 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 1769 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 5370 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 5380 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 5480 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5550 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5560 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5570 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5580 » Version: N/A
When used together with: Rockwellautomation » Drivelogix 1794-l34 » Version: N/A
When used together with: Rockwellautomation » Drivelogix 5560 » Version: N/A
When used together with: Rockwellautomation » Drivelogix 5730 » Version: N/A
When used together with: Rockwellautomation » Guardlogix 5570 » Version: N/A
When used together with: Rockwellautomation » Guardlogix 5580 » Version: N/A
When used together with: Rockwellautomation » Softlogix 5800 » Version: N/A
Rockwellautomation » Factorytalk Services Platform
Versions from including (>=) 2.10
cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*
Matching versions
When used together with: Rockwellautomation » Compact Guardlogix 5370 » Version: N/A
When used together with: Rockwellautomation » Compact Guardlogix 5380 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 1768 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 1769 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 5370 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 5380 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 5480 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5550 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5560 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5570 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5580 » Version: N/A
When used together with: Rockwellautomation » Drivelogix 1794-l34 » Version: N/A
When used together with: Rockwellautomation » Drivelogix 5560 » Version: N/A
When used together with: Rockwellautomation » Drivelogix 5730 » Version: N/A
When used together with: Rockwellautomation » Guardlogix 5570 » Version: N/A
When used together with: Rockwellautomation » Guardlogix 5580 » Version: N/A
When used together with: Rockwellautomation » Softlogix 5800 » Version: N/A
Rockwellautomation » Studio 5000 Logix Designer
Versions from including (>=) 21.0
cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:*:*:*:*:*:*:*:*
Matching versions
When used together with: Rockwellautomation » Compact Guardlogix 5370 » Version: N/A
When used together with: Rockwellautomation » Compact Guardlogix 5380 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 1768 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 1769 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 5370 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 5380 » Version: N/A
When used together with: Rockwellautomation » Compactlogix 5480 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5550 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5560 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5570 » Version: N/A
When used together with: Rockwellautomation » Controllogix 5580 » Version: N/A
When used together with: Rockwellautomation » Drivelogix 1794-l34 » Version: N/A
When used together with: Rockwellautomation » Drivelogix 5560 » Version: N/A
When used together with: Rockwellautomation » Drivelogix 5730 » Version: N/A
When used together with: Rockwellautomation » Guardlogix 5570 » Version: N/A
When used together with: Rockwellautomation » Guardlogix 5580 » Version: N/A
When used together with: Rockwellautomation » Softlogix 5800 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-22681

EPSS FAQ

0.89%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 82 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-22681

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-22681

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Assigned by:
- ics-cert@hq.dhs.gov (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2021-22681

https://us-cert.cisa.gov/ics/advisories/icsa-21-056-03

Rockwell Automation Logix Controllers | CISA
Third Party Advisory;US Government Resource

Jump to

Vulnerability Details : CVE-2021-22681

Products affected by CVE-2021-22681

Exploit prediction scoring system (EPSS) score for CVE-2021-22681

CVSS scores for CVE-2021-22681

CWE ids for CVE-2021-22681

References for CVE-2021-22681