Compact Guardlogix 5370 Firmware vulnerabilities

3 known vulnerabilities in Compact Guardlogix 5370 Firmware from Rockwell Automation. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP…

  CVE-2022-3157Dec 16, 2022Rockwell AutomationEPSS 1.52%

  A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).

• 8.6 High severity

  CompactLogix 5380 controllers: Uncontrolled Resource Consumption

  CVE-2022-1797Jun 2, 2022Rockwell AutomationEPSS 2.16%

  A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would

• 9.8 Critical severity

  1768 CompactLogix controllers: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2022-1161Apr 11, 2022Rockwell AutomationEPSS 5.21%

  An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compile