CVE-2022-3166

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Dec 16, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-316607.8VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with CVE-2022-316617.8VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor wiCVE-2022-316627.5VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor CVE-2022-316636.1VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to iCVE-2022-316647.8VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with lCVE-2022-316657.2VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with CVE-2022-316665.4Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and delete Webhook policCVE-2022-316676.4Harbor fails to validate the user permissions when updating a robot account that belongs to a project that the authenticated user doesn’t haCVE-2022-316687.7Harbor fails to validate the user permissions when updating p2p preheat policies. By sending a request to update a p2p preheat policy with aCVE-2022-316697.7Harbor fails to validate the user permissions when updating tag immutability policies.  By sending a request to update a tag immutability pCVE-2022-31678.8Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.CVE-2022-316707.7Harbor fails to validate the user permissions when updating tag retention policies.  By sending a request to update a tag retention policy
CVE-2022-3166: High severity, CVSS 7.5 | Vulnix