CVE-2020-6998

🗓️ 27 Jul 2022 20:18:00Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 131 Views

The connection establishment algorithm in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior creates an infinite loop, allowing denial-of-service via specially crafted CIP packet requests

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	CompactLogix Loop DoS	30 Mar 202100:00	–	bdu_fstec
Circl	CVE-2020-6998	28 Jul 202200:36	–	circl
CNNVD	Rockwell Automation CompactLogix 5370 input validation error vulnerability	2 Mar 202100:00	–	cnnvd
Cvelist	CVE-2020-6998 Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation	27 Jul 202220:18	–	cvelist
EUVD	EUVD-2020-28138	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers (Update A)	2 Mar 202100:00	–	ics
NVD	CVE-2020-6998	27 Jul 202221:15	–	nvd
osv_cve	CVE-2020-6998	27 Jul 202221:15	–	osv_cve
Prion	Buffer overflow	27 Jul 202221:15	–	prion
Positive Technologies	PT-2021-2365 · Rockwell Automation · Guardlogix 5370 +7	2 Mar 202100:00	–	ptsecurity

NVD

Vulners

Node

AND

rockwellautomation armor_compact_guardlogix_5370_firmwareRange≤33

rockwellautomation armor_compact_guardlogix_5370Match-

Node

AND

rockwellautomation compact_guardlogix_5370_firmwareRange≤33

rockwellautomation compact_guardlogix_5370Match-

Node

AND

rockwellautomation compactlogix_5370_l1_firmwareRange≤33

rockwellautomation compactlogix_5370_l1Match-

Node

AND

rockwellautomation compactlogix_5370_l2_firmwareRange≤33

rockwellautomation compactlogix_5370_l2Match-

Node

AND

rockwellautomation compactlogix_5370_l3_firmwareRange≤33

rockwellautomation compactlogix_5370_l3Match-

Node

AND

rockwellautomation controllogix_5570_firmwareRange≤33

rockwellautomation controllogix_5570Match-

Node

AND

rockwellautomation guardlogix_5560_firmwareRange≤33

rockwellautomation guardlogix_5560Match-

Node

AND

rockwellautomation guardlogix_5570_firmwareRange≤33

rockwellautomation guardlogix_5570Match-

Node

AND

rockwellautomation guardlogix_5580_firmwareRange≤33

rockwellautomation guardlogix_5580Match-

[
  {
    "product": "Armor Compact GuardLogix 5370 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Armor GuardLogix Safety Controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CompactLogix 5370 L1 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CompactLogix 5370 L2 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CompactLogix 5370 L3 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Compact GuardLogix 5370 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ControlLogix 5570 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-061-02
rockwellautomation	www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1130398

17 Jun 2026 03:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.8 - 8.6

EPSS0.0316

SSVC

CWE-20