8.6
High
CVE-2022-3157 A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major…
Description
A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CompactLogix 5370 20 | 20 → 33 | No fix stated |
| Compact GuardLogix 28 | 28 → 33 | No fix stated |
| ControlLogix 5570 20 | 20 → 33 | No fix stated |
| ControlLogix 5570 Redundancy 20 | 20 → 33 | No fix stated |
| GuardLogix 5570 20 | 20 → 33 | No fix stated |