ControlLogix Source Code Validation
Starting from version 11.00.00, the Source Code Validation schedule allows FactoryTalk AssetCentre to detect if a ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, or Compact GuardLogix 5380 controller running version 34 and later firmware has been exploited using a vulnerability disclosed in the Rockwell Automation Knowledgebase Document ID: PN1586 - Logix Designer Application May Allow Unauthorized Controller Code Injection. For more details, see National Vulnerability Database ID: CV E-2022 -1159. You can view the results through event logs and emails, and then update the project. Running the Source Code Validation scheduled task will not affect Backup, Backup and Compare, and Change Detect operations.
IMPORTANT:
If you want to use the Source Code Validation schedule in FactoryTalk AssetCentre version 11.00.00, you must update it with patch. See Knowledgebase Document ID: BF28183 - Patch: Add Source Code Validation disaster recovery schedule type to system, FactoryTalk AssetCentre 11.0.
You can create the Source Code Validation schedule for Allen-Bradley Logix 5000 Controller, only when:
- The browsed asset is a ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, or Compact GuardLogix 5380 controller.
- The firmware of the ControlLogix processor is version 34 or later.
- Studio 5000 Logix Designer version 34 or later is installed on the computer with FactoryTalk AssetCentre Agent.TIP:We recommend that you create the Source Code Validation schedule at the root node of the asset tree.
Provide Feedback