CRITICALCVSS 9.8Actively exploited · CISA KEV since 2026-03-05Vulnerability

CVE-2021-22681

Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this vulnerability, an unauthorized user would require network access to the controller.

Properties

Euvd product
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers
Vulnerability name
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
First seen
2026-03-06T05:01:20+00:00
Cvss score
9.8
Epss score
0.6363
Last seen
2026-10-19T12:00:27+00:00
Due date
2026-03-26
Euvd assigner
icscert
Retrieved at
2026-10-21T01:24:47+00:00
Exploited euvd since
2026-03-05T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2026-03-05
Score
9.8
Euvd base score version
3.1
Fetched at
2026-10-20T10:36:20+00:00
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In Signal since
initial import (Sep 2026)
Euvd base score
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Related Entities (23)

AFFECTS_PRODUCT (20)

→[Product]cpe:2.3:h:rockwellautomation:softlogix_5800:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:drivelogix_5560:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:guardlogix_5580:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:drivelogix_5730:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:compactlogix_5480:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:controllogix_5560:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:controllogix_5570:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:guardlogix_5570:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:compactlogix_5370:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:drivelogix_1794-l34:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:controllogix_5550:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:compactlogix_1769:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:compactlogix_1768:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:rockwellautomation:rslogix_5000:*:*:*:*:*:*:*:*
→[Product]cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:*:*:*:*:*:*:*:*

DESCRIBES (1)

←[KEVEntry]Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

HAS_WEAKNESS (1)

→[Weakness]Insufficiently Protected Credentials

INVOLVES (1)

←[Signal]kev_added · 2026-03-05

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2021-22681 (CVSS 9.8) — Ninja Signal Threat Intelligence | Ninja Signal