Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2022-3157

Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation CompactLogix 5370

Default version status: unaffected

  • 20 to ≤ 33affected

Rockwell Automation Compact GuardLogix

Default version status: unaffected

  • 28 to ≤ 33affected

Rockwell Automation ControlLogix 5570

Default version status: unaffected

  • 20 to ≤ 33affected

Rockwell Automation ControlLogix 5570 Redundancy

Default version status: unaffected

  • 20 to ≤ 33affected

Rockwell Automation GuardLogix 5570

Default version status: unaffected

  • 20 to ≤ 33affected

References