What is CVE-2022-3156?

CVE-2022-3156 is a high-severity vulnerability in Rockwell Automation Studio 5000 Logix Emulate, classified under Improper Authentication. CVSS score: 7.8/10. Published 2022-12-27.

How severe is CVE-2022-3156?

High severity. CVSS v3 base score is 7.8 out of 10.

Auth bypass in Rockwell Automation Studio 5000 Logix Emulate

CVE-2022-3156

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution on the targeted software.

Vulnerability class: Broken Authentication

EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Rockwell Automation Studio 5000 Logix Emulate — versions 20.011
Rockwellautomation Studio_5000_logix_emulate

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

PSIRT@rockwellautomation.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-3156?: CVE-2022-3156 is a high-severity vulnerability in Rockwell Automation Studio 5000 Logix Emulate, classified under Improper Authentication. CVSS score: 7.8/10. Published 2022-12-27.
How severe is CVE-2022-3156?: High severity. CVSS v3 base score is 7.8 out of 10.