CVE-2022-3157 — Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack

Description (CNA)

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / CompactLogix 5370	affected 20 through 33
Rockwell Automation / Compact GuardLogix	affected 28 through 33
Rockwell Automation / ControlLogix 5570	affected 20 through 33
Rockwell Automation / ControlLogix 5570 Redundancy	affected 20 through 33
Rockwell Automation / GuardLogix 5570	affected 20 through 33

CWE

CWE-20

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137757

ADP enrichment

CVE

No English description supplied.

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137757

CISA-ADP

No English description supplied.

No references supplied.