CVE-2022-2004 — AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

Description (CNA)

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Affected (CNA)

Vendor / product	Versions
AutomationDirect / DirectLOGIC D0-06 series CPUs	affected D0-06DD1 before 2.72; affected D0-06DD2 before 2.72; affected D0-06DR before 2.72; affected D0-06DA before 2.72; affected D0-06AR before 2.72; affected D0-06AA before 2.72; affected D0-06DD1-D before 2.72; affected D0-06DD2-D before 2.72; affected D0-06DR-D before 2.72

CWE

CWE-400

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-03

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-03

CISA-ADP

No English description supplied.

No references supplied.