What’s Vulnerable › Vulnerabilities

CVE-2022-3157: Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-16 · updated 2026-06-17
• Weakness: CWE-20

Description

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

Affected products

• Rockwellautomation Compact Guardlogix 5370 Firmware: from 28 through 33
• Rockwellautomation Compact Guardlogix 5380 Firmware: from 28 through 33
• Rockwellautomation Compactlogix 5370 Firmware: from 20 through 33
• Rockwellautomation Controllogix 5570 Firmware: from 20 through 33
• Rockwellautomation Controllogix 5570 Redundancy Firmware: from 20 through 33
• Rockwellautomation Guardlogix 5570 Firmware: from 20 through 33

References

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137757
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137757

Get alerted when CVE-2022-3157 or the next vulnerability affects your stack