CVE-2022-2004

High

Description

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

SeverityHigh

CVSS7.5

Exploit probability—

ProductAutomationdirect D0-06dd1 Firmware

PublishedAug 31, 2022

First seenAug 31, 2022

Weakness typeCWE-400Uncontrolled resource consumption

How to fix

Update

automationdirect d0-06dd1_firmware2.72 or later
automationdirect d0-06dd2_firmware2.72 or later
automationdirect d0-06dr_firmware2.72 or later
automationdirect d0-06da_firmware2.72 or later
automationdirect d0-06ar_firmware2.72 or later
automationdirect d0-06aa_firmware2.72 or later
automationdirect d0-06dd1-d_firmware2.72 or later
automationdirect d0-06dd2-d_firmware2.72 or later
automationdirect d0-06dr-d_firmware2.72 or later

Affected products

Product	Affected versions	Fixed in
automationdirect d0-06dd1_firmware	v < 2.72	2.72
automationdirect d0-06dd2_firmware	v < 2.72	2.72
automationdirect d0-06dr_firmware	v < 2.72	2.72
automationdirect d0-06da_firmware	v < 2.72	2.72
automationdirect d0-06ar_firmware	v < 2.72	2.72
automationdirect d0-06aa_firmware	v < 2.72	2.72
automationdirect d0-06dd1-d_firmware	v < 2.72	2.72
automationdirect d0-06dd2-d_firmware	v < 2.72	2.72
automationdirect d0-06dr-d_firmware	v < 2.72	2.72

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.