Vulnerability Intelligence Report
Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack
CVE-2022-3752
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.
No Active Exploit Signals
CVSS Base Score
8.6
HIGH
Exploitability:3.9
Impact Score:4.0
EPSS Probability:1.22%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-20 ↗CWE-20 Improper Input Validation
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Rockwell Automation | CompactLogix 5480 | 32.011 and later (affected) |
| Rockwell Automation | ControlLogix 5580 | 31.011 and later (affected) |
| Rockwell Automation | GuardLogix 5580 | 31.011 and later (affected) |
| Rockwell Automation | Compact GuardLogix 5380 | 31.011 and later (affected) |
| Rockwell Automation | CompactLogix 5380 | 31.011 and later (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.221%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Rockwell Automation · Vendor · USA |
| Reserved | 2022-10-28T20:53:01 |
| Published | 2022-12-19T22:23:36 |
| Patch Date | 2022-12-13 |
| Last Updated | 2025-04-16T14:28:03 |
Community Chatter & Buzz