Rockwellautomation Compact Guardlogix 5370 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Rockwellautomation Compact Guardlogix 5370 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-1161 — CVSS 10.0 (critical): An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix…
• CVE-2022-3157 — CVSS 8.6 (high): A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault…
• CVE-2019-10954 — CVSS 7.5 (high): An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable…
• CVE-2022-1797 — CVSS 6.8 (medium): A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell…
• CVE-2020-6998 — CVSS 5.8 (medium): The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not…