← Database

CVE-2022-3157

HIGH CVSS: 8.6 Published: 2022-12-16 Modified: 2026-06-17

Description

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

Affected Platforms

Rockwellautomation Controllogix 5570 Redundancy FirmwareRockwellautomation Controllogix 5570Rockwellautomation Compact Guardlogix 5370 FirmwareRockwellautomation Compact Guardlogix 5380Rockwellautomation Guardlogix 5570Rockwellautomation Compact Guardlogix 5380 FirmwareRockwellautomation Controllogix 5570 RedundancyRockwellautomation Compactlogix 5370Rockwellautomation Compact Guardlogix 5370Rockwellautomation Guardlogix 5570 Firmware

Weakness Type

CWE-20, NVD-CWE-noinfo

References