CVE-2021-22681

## CVE-2021-22681: Rockwell Automation Insufficient Protected Credentials **What it is:** Studio 5000 Logix Designer stores a verification key in insufficiently protected form, allowing attackers with network access to extract it and impersonate legitimate design software when communicating with Logix controllers. **Impact:** An attacker on the network can discover this key, then connect unauthorized applications directly to Logix industrial controllers, potentially modifying ladder logic, stealing configurations, or disrupting operations. **What to do:** Apply Rockwell's security patches for Studio 5000 Logix Designer immediately; segment Logix controller networks from untrusted segments; implement network monitoring to detect unauthorized connection attempts to controllers; review access logs for suspicious design software connections to identify past exploitation.