CVE-2021-22681CRITICAL· 9.8MITRENVD대응게시일: 2021. 03. 03.수정일: 2026. 03. 06.CNA: ics-cert@hq.dhs.govAnalyzed

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix cont

위협 신호 · CVSS · EPSS · KEV

즉시 패치· 실측 악용 확인 · KEV 등재

CVSS

9.8critical

이론적 심각도 점수

EPSS

61.0%상위 0.9%

30일 내 악용 확률 예측

KEV

등재됨

등재일 2026. 03. 05.

패치 기한 2026. 03. 26.

권장 대응 기한3일 이내+ 침해 포렌식CISA SSVC 기준

즉시 패치 + 침해 여부 포렌식 분석

KEV 악용자동화 가능완전 장악외부 노출· KEV 등재 · 자동화 가능 · 완전 장악 · 외부 노출

CVSS 벡터 · 메트릭

악용 경로

공격 벡터네트워크

공격 복잡도낮음

필요 권한불필요

사용자 상호작용불필요

범위불변

영향

기밀성 영향높음

무결성 영향높음

가용성 영향높음

버전별 점수

CVSS 3.19.8CRITICAL· 악용성 3.9· 영향도 5.9

CVSS 2.07.5HIGH· 악용성 10· 영향도 6.4

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

약점 (CWE)

CWE-522
불충분하게 보호된 자격증명 — 자격증명이 약하게 저장/전송되어 탈취 위험.

상세 설명

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.

AI 심층 분석

공격 시나리오 · 재현 가능한 PoC 페이로드 · 즉시 적용 가능한 차단 패치를 한 번에 받아 보세요. 보안 운영팀이 그대로 점검·티켓팅에 쓸 수 있는 형태로 정리해 드립니다.

영향받는 제품·버전

rockwellautomation factorytalk_services_platform>= 2.10
other
rockwellautomation rslogix_500016 - 20
other
rockwellautomation studio_5000_logix_designer>= 21.0
other
rockwellautomation compact_guardlogix_5370
other
rockwellautomation compact_guardlogix_5380
other
rockwellautomation compactlogix_1768
other
rockwellautomation compactlogix_1769
other
rockwellautomation compactlogix_5370
other
rockwellautomation compactlogix_5380
other
rockwellautomation compactlogix_5480
other
rockwellautomation controllogix_5550
other
rockwellautomation controllogix_5560
other
rockwellautomation controllogix_5570
other
rockwellautomation controllogix_5580
other
rockwellautomation drivelogix_1794-l34
other
rockwellautomation drivelogix_5560
other
rockwellautomation drivelogix_5730
other
rockwellautomation guardlogix_5570
other
rockwellautomation guardlogix_5580
other
rockwellautomation softlogix_5800
other

영향받는 구성 (CPE) 20

rockwellautomation factorytalk_services_platform≥ 2.10cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*
rockwellautomation rslogix_5000≥ 16 ≤ 20cpe:2.3:a:rockwellautomation:rslogix_5000:*:*:*:*:*:*:*:*
rockwellautomation studio_5000_logix_designer≥ 21.0cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:*:*:*:*:*:*:*:*
rockwellautomation compact_guardlogix_5370cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-:*:*:*:*:*:*:*
rockwellautomation compact_guardlogix_5380cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-:*:*:*:*:*:*:*
rockwellautomation compactlogix_1768cpe:2.3:h:rockwellautomation:compactlogix_1768:-:*:*:*:*:*:*:*
rockwellautomation compactlogix_1769cpe:2.3:h:rockwellautomation:compactlogix_1769:-:*:*:*:*:*:*:*
rockwellautomation compactlogix_5370cpe:2.3:h:rockwellautomation:compactlogix_5370:-:*:*:*:*:*:*:*
rockwellautomation compactlogix_5380cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*
rockwellautomation compactlogix_5480cpe:2.3:h:rockwellautomation:compactlogix_5480:-:*:*:*:*:*:*:*
rockwellautomation controllogix_5550cpe:2.3:h:rockwellautomation:controllogix_5550:-:*:*:*:*:*:*:*
rockwellautomation controllogix_5560cpe:2.3:h:rockwellautomation:controllogix_5560:-:*:*:*:*:*:*:*
rockwellautomation controllogix_5570cpe:2.3:h:rockwellautomation:controllogix_5570:-:*:*:*:*:*:*:*
rockwellautomation controllogix_5580cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*
rockwellautomation drivelogix_1794-l34cpe:2.3:h:rockwellautomation:drivelogix_1794-l34:-:*:*:*:*:*:*:*
rockwellautomation drivelogix_5560cpe:2.3:h:rockwellautomation:drivelogix_5560:-:*:*:*:*:*:*:*
rockwellautomation drivelogix_5730cpe:2.3:h:rockwellautomation:drivelogix_5730:-:*:*:*:*:*:*:*
rockwellautomation guardlogix_5570cpe:2.3:h:rockwellautomation:guardlogix_5570:-:*:*:*:*:*:*:*
rockwellautomation guardlogix_5580cpe:2.3:h:rockwellautomation:guardlogix_5580:-:*:*:*:*:*:*:*
rockwellautomation softlogix_5800cpe:2.3:h:rockwellautomation:softlogix_5800:-:*:*:*:*:*:*:*

참고 자료 2

https://us-cert.cisa.gov/ics/advisories/icsa-21-056-03
Third Party AdvisoryUS Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22681
US Government Resource

링크 내용 불러오는 중…