Log in Start free

Vulnerability · Published May 31, 2022 · Assigned by icscert

CVE-2022-1797Rockwell Automation Logix Controllers Uncontrolled Resource Consumption

Medium 6.8

In plain English

A medium-severity uncontrolled resource consumption in Compact GuardLogix 5370 controllers from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 82% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)2.2%top 17.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.

Affected products (as reported)

VendorProductVersions
Rockwell Automation CompactLogix 5380 controllers unspecified – through 32.013
Rockwell Automation Compact GuardLogix 5380 controllers unspecified – through 32.013
Rockwell Automation CompactLogix 5480 controllers unspecified – through 32.013
Rockwell Automation ControlLogix 5580 controllers unspecified – through 32.013
Rockwell Automation GuardLogix 5580 controllers unspecified – through 32.013
Rockwell Automation CompactLogix 5370 controllers unspecified – through 33.013
Rockwell Automation Compact GuardLogix 5370 controllers unspecified – through 33.013
Rockwell Automation ControlLogix 5570 controllers unspecified – through 33.013
Rockwell Automation GuardLogix 5570 controllers 33.013

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

References