Exploited Vulnerabilities DailyCVE-2021-22681: Rockwell Multiple Products
EPSS63.6%No. 775 of 1739 in KEV
CVE year2021~5 yrs before listing
Same vendor in KEV1
Same product1
| Field | Value |
|---|---|
| Vendor | Rockwell |
| Product | Multiple Products |
| Name | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability |
| Added to KEV | 2026-03-05 |
| US federal due date | 2026-03-26 |
| Ransomware use | Unknown |
| CWE | CWE-522 |
CISA description
Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this vulnerability, an unauthorized user would require network access to the controller.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Rockwell Multiple Products vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2026-03-05.