CVE-2022-3156: Rockwell Automation Studio 5000 Logix Emulate Vulnerable to a Remote Code Execution Vulnerability

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-27 · updated 2026-06-17
Weakness: CWE-287

Description

A remote code execution vulnerability exists in Rockwell Automation Studio 5000 Logix Emulate software. Users are granted elevated permissions on certain product services when the software is installed. Due to this misconfiguration, a malicious user could potentially achieve remote code execution on the targeted software.

Affected products

Rockwell Automation Studio 5000 Logix Emulate: from 20.011 before 34.00 — fixed in 34.00

How to fix

Upgrade to a fixed version: Rockwell Automation Studio 5000 Logix Emulate 34.00. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-3156 or the next vulnerability affects your stack