CVE-2022-3752
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.
| Software | From | Fixed in |
|---|---|---|
| rockwellautomation / compactlogix_5480_firmware | 32.011 | 32.011.x |
| rockwellautomation / compactlogix_5580_firmware | 31.011 | 31.011.x |
| rockwellautomation / guardlogix_5580_firmware | 32.011 | 32.011.x |
| rockwellautomation / compact_guardlogix_5380_firmware | 31.011 | 31.011.x |
| rockwellautomation / compactlogix_5380_firmware | 31.011 | 31.011.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime