Lucene search
HistoryDec 16, 2022 - 9:15 p.m.
CVE-2022-3157
rockwell automation
vulnerability
mnrf
dos
cip request
denial-of-service
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
25.1%
A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).
Affected configurations
Node
rockwellautomationcompactlogix_5370Match-
rockwellautomationcompactlogix_5370_firmwareRange20–33
Node
rockwellautomationcompact_guardlogix_5370Match-
rockwellautomationcompact_guardlogix_5370_firmwareRange28–33
Node
rockwellautomationcompact_guardlogix_5380Match-
rockwellautomationcompact_guardlogix_5380_firmwareRange28–33
Node
rockwellautomationcontrollogix_5570Match-
rockwellautomationcontrollogix_5570_firmwareRange20–33
Node
rockwellautomationcontrollogix_5570_redundancyMatch-
rockwellautomationcontrollogix_5570_redundancy_firmwareRange20–33
Node
rockwellautomationguardlogix_5570Match-
rockwellautomationguardlogix_5570_firmwareRange20–33
Related
prion
prion
Design/Logic Flaw
2022-12-16 21:15:00
cvelist
cvelist
nessus
nessus
ics
ics
Rockwell Automation GuardLogix and ControlLogix controllers
2022-12-20 12:00:00
cve
cve
CVE-2022-3157
2022-12-16 21:15:08
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
25.1%
Related for NVD:CVE-2022-3157