Description (CNA)
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / CompactLogix 5380 controllers | affected unspecified through 32.013 |
| Rockwell Automation / Compact GuardLogix 5380 controllers | affected unspecified through 32.013 |
| Rockwell Automation / CompactLogix 5480 controllers | affected unspecified through 32.013 |
| Rockwell Automation / ControlLogix 5580 controllers | affected unspecified through 32.013 |
| Rockwell Automation / GuardLogix 5580 controllers | affected unspecified through 32.013 |
| Rockwell Automation / CompactLogix 5370 controllers | affected unspecified through 33.013 |
| Rockwell Automation / Compact GuardLogix 5370 controllers | affected unspecified through 33.013 |
| Rockwell Automation / ControlLogix 5570 controllers | affected unspecified through 33.013 |
| Rockwell Automation / GuardLogix 5570 controllers | affected 33.013 |
CWE
CWE-400
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-144-01
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1135559
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.