← Database

CVE-2022-3752

HIGH CVSS: 8.6 Published: 2022-12-19 Modified: 2026-06-17

Description

An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.

Affected Platforms

Rockwellautomation Compactlogix 5480 FirmwareRockwellautomation Guardlogix 5580Rockwellautomation Compactlogix 5380 FirmwareRockwellautomation Compact Guardlogix 5380Rockwellautomation Compactlogix 5580 FirmwareRockwellautomation Compactlogix 5580Rockwellautomation Compact Guardlogix 5380 FirmwareRockwellautomation Compactlogix 5480Rockwellautomation Guardlogix 5580 FirmwareRockwellautomation Compactlogix 5380

Weakness Type

CWE-20, NVD-CWE-noinfo

References