CVE-2022-1797
Medium
Description
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.
SeverityMedium
CVSS6.8
Exploit probability—
ProductRockwellautomation Compactlogix 5380 Firmware
PublishedJun 2, 2022
First seenJun 2, 2022
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- rockwellautomation compactlogix_5380_firmware33.011 or later
- rockwellautomation compact_guardlogix_5380_firmware33.011 or later
- rockwellautomation compactlogix_5480_firmware33.011 or later
- rockwellautomation controllogix_5580_firmware33.011 or later
- rockwellautomation guardlogix_5580_firmware33.011 or later
- rockwellautomation compactlogix_5370_firmware34.011 or later
- rockwellautomation compact_guardlogix_5370_firmware34.011 or later
- rockwellautomation controllogix_5570_firmware34.011 or later
- rockwellautomation guardlogix_5570_firmware34.011 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation compactlogix_5380_firmware | v < 33.011 | 33.011 |
| rockwellautomation compact_guardlogix_5380_firmware | v < 33.011 | 33.011 |
| rockwellautomation compactlogix_5480_firmware | v < 33.011 | 33.011 |
| rockwellautomation controllogix_5580_firmware | v < 33.011 | 33.011 |
| rockwellautomation guardlogix_5580_firmware | v < 33.011 | 33.011 |
| rockwellautomation compactlogix_5370_firmware | v < 34.011 | 34.011 |
| rockwellautomation compact_guardlogix_5370_firmware | v < 34.011 | 34.011 |
| rockwellautomation controllogix_5570_firmware | v < 34.011 | 34.011 |
| rockwellautomation guardlogix_5570_firmware | v < 34.011 | 34.011 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.