CVE-2022-3157: rockwell automation compact guardlogix Improper Input Validation
CVSS: 8.6v3.1HighModified
Published 16-12-2022Last modified 16-04-2025
Vulnerability summary
CVE-2022-3157 is a high (CVSS 8.6) Improper Input Validation vulnerability in rockwell automation compact guardlogix. EPSS estimates a 1.52% chance of exploitation in the next 30 days, higher than 74.4% of scored vulnerabilities.
CVSS score
8.6/10
010
High · v3.1 (CVE.org)EPSS score
1.52%
0%100%
Low · +0.09 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 16-12-2022PublishedVulnerability first disclosed.
- 16-04-2025Last modifiedVulnerability information updated.
Description
A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).
CVSS metrics
2 scores · 2 sources · 1 versionHigh 8.6Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HSources2 sources · 7.5–8.6
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
1.52%
Chance of exploitation in the next 30 days
Percentile
74%
Versus all other CVEs
30-day change
+0.09 pp
From 1.43% on 21-09-2026
21-09-202621-10-2026
EPSS score1.52%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Rockwellautomation6 products
- compact_guardlogix_5370_firmware≥ 28, ≤ 33
- compact_guardlogix_5380_firmware≥ 28, ≤ 33
- compactlogix_5370_firmware≥ 20, ≤ 33
- controllogix_5570_firmware≥ 20, ≤ 33
- controllogix_5570_redundancy_firmware≥ 20, ≤ 33
Rockwell automation5 products
- compact guardlogix≥ 28, ≤ 33
- compactlogix 5370≥ 20, ≤ 33
- controllogix® 5570≥ 20, ≤ 33
- controllogix 5570 redundancy≥ 20, ≤ 33
- guardlogix® 5570≥ 20, ≤ 33
2 vendors · 11 products
References
1 links- rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137757Permissions RequiredVendor Advisory