Log in Start free

Vulnerability · Published Dec 19, 2022 · Assigned by Rockwell

CVE-2022-3752Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack

High 8.6

In plain English

A high-severity improper input validation in Compact GuardLogix 5380 from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).

Severity (CVSS 3.1)8.6High
Exploit odds (30 days)1.3%top 29.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.

Affected products (as reported)

VendorProductVersions
Rockwell Automation CompactLogix 5480 32.011 and later
Rockwell Automation ControlLogix 5580 31.011 and later
Rockwell Automation GuardLogix 5580 31.011 and later
Rockwell Automation Compact GuardLogix 5380 31.011 and later
Rockwell Automation CompactLogix 5380 31.011 and later

Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References