Vulnerability · Published Aug 31, 2022 · Assigned by icscert

CVE-2022-2004AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

High 7.5

In plain English

A high-severity uncontrolled resource consumption in DirectLOGIC D0-06 series CPUs from AutomationDirect. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)1.0%top 36.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Affected products (as reported)

Vendor	Product	Versions
AutomationDirect	DirectLOGIC D0-06 series CPUs	D0-06DD1 – before 2.72D0-06DD2 – before 2.72D0-06DR – before 2.72D0-06DA – before 2.72D0-06AR – before 2.72D0-06AA – before 2.72D0-06DD1-D – before 2.72D0-06DD2-D – before 2.72

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-03 x_refsource_CONFIRM