CSIRT-Kabupaten

Ringkasan Kerentanan (Vulnerability Overview)

Rilis: 01 October 2026

Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this vulnerability, an unauthorized user would require network access to the controller.

Tindakan Mitigasi yang Wajib Diterapkan (Required Action)

Instruksi Keamanan untuk Pengelola TI / OPD

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Seluruh pengelola server dan aplikasi di lingkungan OPD Kabupaten Ciamis diimbau untuk segera mengaudit perangkat terdampak dan mengaplikasikan patch sebelum batas waktu mitigasi.

Produk & Versi Terdampak

Produk	Versi Basis	Batas Terdampak	Status Keamanan
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers	RSLogix 5000 Versions 16 through 20	—	AFFECTED
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers	Studio 5000 Logix Designer: Versions 21 and later	—	AFFECTED
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers	CompactLogix 1768, 1769, 5370, 5380, 5480	—	AFFECTED
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers	ControlLogix 5550, 5560, 5570, 5580	—	AFFECTED
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers	DriveLogix 5560, 5730, 1794-L34	—	AFFECTED
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers	Compact GuardLogix 5370, 5380	—	AFFECTED
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers	GuardLogix 5570, 5580	—	AFFECTED
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers	SoftLogix 5800	—	AFFECTED