CVE-2022-3156
Last modified
CVE-2022-3156 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution on the targeted software. . EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution on the targeted software.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Studio 5000 Logix Emulate | >= 20.011, < 34.00 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-3156?
How severe is CVE-2022-3156?
How do I fix CVE-2022-3156?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-31554The rohitnayak/movie-review-sentiment-analysis repository th…9.3
- CVE-2022-31555The romain20100/nursequest repository through 2018-02-22 on …9.3
- CVE-2022-31556The rusyasoft/TrainEnergyServer repository through 2017-08-0…9.3
- CVE-2022-31557The seveas/golem repository through 2016-05-17 on GitHub all…9.3
- CVE-2022-31558The tooxie/shiva-server repository through 0.10.0 on GitHub …9.3
- CVE-2022-31559The tsileo/flask-yeoman repository through 2013-09-13 on Git…9.3
- CVE-2022-31560The uncleYiba/photo_tag repository through 2020-08-31 on Git…9.3
- CVE-2022-31561The varijkapil13/Sphere_ImageBackend repository through 2019…9.3
- CVE-2022-31562The waveyan/internshipsystem repository through 2018-05-22 o…9.3
- CVE-2022-31563The whmacmac/vprj repository through 2022-04-06 on GitHub al…9.3
- CVE-2022-31564The woduq1414/munhak-moa repository before 2022-05-03 on Git…9.3
- CVE-2022-31565The yogson/syrabond repository through 2020-05-25 on GitHub …9.3
Are you affected by CVE-2022-3156?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST