Is CVE-2022-3166 actively exploited?

No active exploitation of CVE-2022-3166 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-3166 be exploited remotely?

Yes. CVE-2022-3166 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-3166?

CVE-2022-3166 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2022-3166

HIGH

CVE-2022-3166

CWE-924Published: December 16, 2022· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device

NVD Source

Technical Analysis

CVE-2022-3166 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 7.5.