Summary
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to bypass the verification mechanism and connect with Logix controllers. Additionally, this vulnerability could enable an unauthorized third-party tool to alter the controller 's configuration and/or application code.
Vulnerabilities 1
-
Critical 9.8
Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key…
KEV Mar 5, 2026
Revision history
-
#2
ICSA-21-056-03 Rockwell Automation Logix Controllers (Update A)
-
#1
ICSA-21-056-03 Rockwell Automation Logix Controllers
References
-
ICS Advisory ICSA-21-056-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-056-03
-
Recommended Practices
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B