6.8
Medium
CVE-2022-1797 A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service…
Description
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CompactLogix 5380 controllers 32.013 | earliest → 32.013 | No fix stated |
| Compact GuardLogix 5380 controllers 32.013 | earliest → 32.013 | No fix stated |
| CompactLogix 5480 controllers 32.013 | earliest → 32.013 | No fix stated |
| ControlLogix 5580 controllers 32.013 | earliest → 32.013 | No fix stated |
| GuardLogix 5580 controllers 32.013 | earliest → 32.013 | No fix stated |
| CompactLogix 5370 controllers 33.013 | earliest → 33.013 | No fix stated |
| Compact GuardLogix 5370 controllers 33.013 | earliest → 33.013 | No fix stated |
| ControlLogix 5570 controllers 33.013 | earliest → 33.013 | No fix stated |
| GuardLogix 5570 controllers | 33.013 | No fix stated |