What’s Vulnerable › Vulnerabilities
CVE-2022-3752: Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-12-19 · updated 2026-06-17
- Weakness: CWE-20
Description
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.
Affected products
- Rockwellautomation Compact Guardlogix 5380 Firmware: from 31.011
- Rockwellautomation Compactlogix 5380 Firmware: from 31.011
- Rockwellautomation Compactlogix 5480 Firmware: from 32.011
- Rockwellautomation Compactlogix 5580 Firmware: from 31.011
- Rockwellautomation Guardlogix 5580 Firmware: from 32.011
References
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137664
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137664
Get alerted when CVE-2022-3752 or the next vulnerability affects your stack