High ICSA-22-354-02 1 CVE

Rockwell Automation GuardLogix and ControlLogix controllers

Published Dec 20, 2022 · Updated Dec 20, 2022

Vendor: Rockwell Automation Product: Compact GuardLogix® 5370 Product: CompactLogix 5370 Product: ControlLogix® 5570 Product: ControlLogix5570 redundancy Product: GuardLogix® 5570

Summary

Successful exploitation of this vulnerability could potentially lead to degradation in availability of the controller and/or a possible major nonrecoverable fault.

Vulnerabilities 1

High 8.6

CVE-2022-3157

Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

Rockwell Automation CompactLogix 5370 GuardLogix® 5570 ControlLogix® 5570 ICS / OT

Dec 16, 2022

Revision history

2022-12-20 #1
Publication Date

References

ICS Advisory ICSA-22-354-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-354-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf