CVE-2022-1797

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 02-06-2022 04:15

Last modified: - 11-06-2022 02:49

Total changes: - 2

Description

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Changed

Scope

None

User interaction

8.6

Base score

3.9

4.0

Exploitability score

Impact score

Verification logic

AND

vendor=rockwellautomation AND product=compactlogix_5380_firmware AND versionEndExcluding=33.011

vendor=rockwellautomation AND product=compactlogix_5380 AND version=-

AND

vendor=rockwellautomation AND product=compact_guardlogix_5380_firmware AND versionEndExcluding=33.011

vendor=rockwellautomation AND product=compact_guardlogix_5380 AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_5480_firmware AND versionEndExcluding=33.011

vendor=rockwellautomation AND product=compactlogix_5480 AND version=-

AND

vendor=rockwellautomation AND product=controllogix_5580_firmware AND versionEndExcluding=33.011

vendor=rockwellautomation AND product=controllogix_5580 AND version=-

AND

vendor=rockwellautomation AND product=guardlogix_5580_firmware AND versionEndExcluding=33.011

vendor=rockwellautomation AND product=guardlogix_5580 AND version=-

AND

vendor=rockwellautomation AND product=compactlogix_5370_firmware AND versionEndExcluding=34.011

vendor=rockwellautomation AND product=compactlogix_5370 AND version=-

AND

vendor=rockwellautomation AND product=compact_guardlogix_5370_firmware AND versionEndExcluding=34.011

vendor=rockwellautomation AND product=compact_guardlogix_5370 AND version=-

AND

vendor=rockwellautomation AND product=controllogix_5570_firmware AND versionEndExcluding=34.011

vendor=rockwellautomation AND product=controllogix_5570 AND version=-

AND

vendor=rockwellautomation AND product=guardlogix_5570_firmware AND versionEndExcluding=34.011

vendor=rockwellautomation AND product=guardlogix_5570 AND version=-

Reference

Keywords

CVE-2022-1797

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-1797

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures