CVE-2022-3156

HIGH 7.8CVE-2022-3156 · Published 27/12/2022 · updated 17/06/2026

In short

CVE-2022-3156 is a HIGH (CVSS 7.8) vulnerability affecting studio 5000 logix emulate (rockwellautomation).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.0% of all vulnerabilities.
Fix: update to 34.00 or later.

Package	Affected versions	Patched versions
studio 5000 logix emulate rockwellautomation	`≥ 20.011, < 34.00`	`34.00`

Description

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution on the targeted software.

References

rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137846 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free