NetSight
IP …
high8.6

CVE-2022-3157

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of…

Impact

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

Affected products

VendorProductAffected versions
RockwellautomationCompactlogix 5370 Firmware
from 20 through 33
RockwellautomationCompact Guardlogix 5370 Firmware
from 28 through 33
RockwellautomationCompact Guardlogix 5380 Firmware
from 28 through 33
RockwellautomationControllogix 5570 Firmware
from 20 through 33
RockwellautomationControllogix 5570 Redundancy Firmware
from 20 through 33
RockwellautomationGuardlogix 5570 Firmware
from 20 through 33

Weakness classification

CWE-20

References