CVE-2022-1159highCWE-94

CVE-2022-1159: high-severity vulnerability in Rockwell Automation Studio 5000 Logix Designer

Rockwell Automation Studio 5000 Logix Designer Code Injection

Published · Updated

Follow this CVE+ Monitor Studio 5000 Logix Designer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.7epss 3.5%
Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected products
Rockwell Automation · Studio 5000 Logix Designer
Related CVEs — Rockwell Automation Studio 5000 Logix Designer

In the same product, most dangerous first.

CVE-2026-9108MEDIUMStudio 5000 Logix Designer® – Multiple VulnerabilitiesEPSS 0.2%CVE-2026-9128HIGHStudio 5000 Logix Designer® – Multiple VulnerabilitiesEPSS 0.2%CVE-2026-9127HIGHStudio 5000 Logix Designer® – Multiple VulnerabilitiesEPSS 0.2%