Read the docs
TI-2022-02916 Aliases CVE-2022-3157GHSA-7cx5-36g6-5r38

Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack

Priority MEDIUM 46CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01525 74th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellCompactLogix 537020 – 33—No fix listedCNA
RockwellCompact GuardLogix28 – 33—No fix listedCNA
RockwellControlLogix 557020 – 33—No fix listedCNA
RockwellControlLogix 5570 Redundancy20 – 33—No fix listedCNA
RockwellGuardLogix 557020 – 33—No fix listedCNA
  • CompactLogix 5370 VendorRockwell Affected 20 – 33 Fixed in — No fix listed CNA
  • Compact GuardLogix VendorRockwell Affected 28 – 33 Fixed in — No fix listed CNA
  • ControlLogix 5570 VendorRockwell Affected 20 – 33 Fixed in — No fix listed CNA
  • ControlLogix 5570 Redundancy VendorRockwell Affected 20 – 33 Fixed in — No fix listed CNA
  • GuardLogix 5570 VendorRockwell Affected 20 – 33 Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:o:rockwellautomation:compactlogix_5370_firmware:*:*:*:*:*:*:*:*20 – 33VulnerableRockwell
cpe:2.3:h:rockwellautomation:compactlogix_5370:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:compact_guardlogix_5370_firmware:*:*:*:*:*:*:*:*28 – 33VulnerableRockwell
cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:*:*:*:*:*:*:*:*28 – 33VulnerableRockwell
cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:controllogix_5570_firmware:*:*:*:*:*:*:*:*20 – 33VulnerableRockwell
cpe:2.3:h:rockwellautomation:controllogix_5570:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:controllogix_5570_redundancy_firmware:*:*:*:*:*:*:*:*20 – 33VulnerableRockwell
cpe:2.3:h:rockwellautomation:controllogix_5570_redundancy:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
  • cpe:2.3:o:rockwellautomation:compactlogix_5370_firmware:*:*:*:*:*:*:*:* Versions 20 – 33 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compactlogix_5370:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:compact_guardlogix_5370_firmware:*:*:*:*:*:*:*:* Versions 28 – 33 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:*:*:*:*:*:*:*:* Versions 28 – 33 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:controllogix_5570_firmware:*:*:*:*:*:*:*:* Versions 20 – 33 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:controllogix_5570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:controllogix_5570_redundancy_firmware:*:*:*:*:*:*:*:* Versions 20 – 33 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:controllogix_5570_redundancy:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:rockwellautomation:guardlogix_5570_firmware:*:*:*:*:*:*:*:*20 – 33VulnerableRockwell
cpe:2.3:h:rockwellautomation:guardlogix_5570:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
  • cpe:2.3:o:rockwellautomation:guardlogix_5570_firmware:*:*:*:*:*:*:*:* Versions 20 – 33 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:guardlogix_5570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-3157
  2. 2026-10-03 Alias added: GHSA-7cx5-36g6-5r38

References

Advisory 1

  • TI-2022-01050 ICSA-22-090-05 Rockwell Automation Logix Controllers CVSS 3.1CRITICAL 10.0
  • TI-2020-05646 Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation CVSS 3.1HIGH 8.6
  • TI-2019-08173 Rockwell Automation CompactLogix 5370 Stack-based Buffer Overflow CVSS 3.1HIGH 7.5
  • TI-2022-01663 Rockwell Automation Logix Controllers Uncontrolled Resource Consumption CVSS 3.1HIGH 8.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences