CVE-2022-3752: falha de alta gravidade em Rockwell Automation Compact GuardLogix 5380
Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 1.3%
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic
loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload
the user project file to bring the device back online and continue normal operation.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Rockwell Automation · Compact GuardLogix 5380Rockwell Automation · CompactLogix 5380Rockwell Automation · CompactLogix 5480Rockwell Automation · ControlLogix 5580Rockwell Automation · GuardLogix 5580CVEs relacionadas — Rockwell Automation Compact GuardLogix 5380
No mesmo produto, das mais perigosas para as menos.
CVE-2024-3493HIGHRockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header ValueEPSS 0.6%CVE-2024-6077HIGHRockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIPEPSS 0.6%CVE-2024-6207HIGHCVE-2024-6207EPSS 0.6%CVE-2024-5659HIGHRockwell Automation Multicast Request Causes major nonrecoverable fault on Select ControllersEPSS 0.3%