CVE-2022-3157: Rockwellautomation Compact Guardlogix 5370 Firmware

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

Affected products

• Rockwellautomation Compact Guardlogix 5370 Firmware: from 28, up to and including 33
• Rockwellautomation Compact Guardlogix 5380 Firmware: from 28, up to and including 33
• Rockwellautomation Compactlogix 5370 Firmware: from 20, up to and including 33
• Rockwellautomation Controllogix 5570 Firmware: from 20, up to and including 33
• Rockwellautomation Controllogix 5570 Redundancy Firmware: from 20, up to and including 33
• Rockwellautomation Guardlogix 5570 Firmware: from 20, up to and including 33

Published 2022-12-16. Last modified 2026-06-17.