Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. Th…

Multiple Rockwell Automation products contain an insufficient protected credentials vulnerability (CVE-2021-22681) in Studio 5000 Logix Designer software. The vulnerability allows discovery of a verification key used for communication between Logix controllers and Rockwell design software. Successful exploitation could enable unauthorized applications to connect with Logix controllers, requiring network access to the controller. This authentication bypass vulnerability affects critical industrial control systems and could compromise operational technology environments.