CVE-2022-1797: falha de média gravidade em Rockwell Automation Compact GuardLogix 5370…
Rockwell Automation Logix Controllers Uncontrolled Resource Consumption
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Compact GuardLogix 5370 controllers+ Monitorar Compact GuardLogix 5380 controllers
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.8epss 2.2%
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Rockwell Automation · Compact GuardLogix 5370 controllersRockwell Automation · Compact GuardLogix 5380 controllersRockwell Automation · CompactLogix 5370 controllersRockwell Automation · CompactLogix 5380 controllersRockwell Automation · CompactLogix 5480 controllersRockwell Automation · ControlLogix 5570 controllersRockwell Automation · ControlLogix 5580 controllersRockwell Automation · GuardLogix 5570 controllersRockwell Automation · GuardLogix 5580 controllersCVEs relacionadas — Rockwell Automation Compact GuardLogix 5370…
No mesmo produto, das mais perigosas para as menos.
CVE-2019-10952—Rockwell Automation CompactLogix 5370 Uncontrolled Resource ConsumptionEPSS 10.0%CVE-2019-10954—Rockwell Automation CompactLogix 5370 Stack-based Buffer OverflowEPSS 6.1%CVE-2022-1161CRITICALICSA-22-090-05 Rockwell Automation Logix ControllersEPSS 5.2%CVE-2020-6998MEDIUMRockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input ValidationEPSS 3.2%