CVE-2020-6998

🗓️ 27 Jul 2022 20:18:00Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 101 Views

The connection establishment algorithm in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior creates an infinite loop, allowing denial-of-service via specially crafted CIP packet requests

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of microprogrammed software in programmable logic controllers such as CompactLogix 5370 L1, CompactLogix 5370 L2, CompactLogix 5370 L3, Compact GuardLogix 5370, ControlLogix 5570, and GuardLogix 5370, related to the execution of a loop with an unavailable exit condition, allows a intruder to cause a service failure.	30 Mar 202100:00	–	bdu_fstec
Circl	CVE-2020-6998	28 Jul 202200:36	–	circl
CNNVD	Rockwell Automation CompactLogix 5370 输入验证错误漏洞	2 Mar 202100:00	–	cnnvd
Cvelist	CVE-2020-6998 Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation	27 Jul 202220:18	–	cvelist
EUVD	EUVD-2020-28138	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers (Update A)	2 Mar 202100:00	–	ics
NVD	CVE-2020-6998	27 Jul 202221:15	–	nvd
OSV	CVE-2020-6998	27 Jul 202221:15	–	osv
Prion	Buffer overflow	27 Jul 202221:15	–	prion
Positive Technologies	PT-2021-2365 · Rockwell Automation · Guardlogix 5370 +7	2 Mar 202100:00	–	ptsecurity

NVD

Vulners

Node

rockwellautomation armor_compact_guardlogix_5370_firmwareRange≤33

AND

rockwellautomation armor_compact_guardlogix_5370Match-

Node

rockwellautomation compact_guardlogix_5370_firmwareRange≤33

AND

rockwellautomation compact_guardlogix_5370Match-

Node

rockwellautomation compactlogix_5370_l1_firmwareRange≤33

AND

rockwellautomation compactlogix_5370_l1Match-

Node

rockwellautomation compactlogix_5370_l2_firmwareRange≤33

AND

rockwellautomation compactlogix_5370_l2Match-

Node

rockwellautomation compactlogix_5370_l3_firmwareRange≤33

AND

rockwellautomation compactlogix_5370_l3Match-

Node

rockwellautomation controllogix_5570_firmwareRange≤33

AND

rockwellautomation controllogix_5570Match-

Node

rockwellautomation guardlogix_5560_firmwareRange≤33

AND

rockwellautomation guardlogix_5560Match-

Node

rockwellautomation guardlogix_5570_firmwareRange≤33

AND

rockwellautomation guardlogix_5570Match-

Node

rockwellautomation guardlogix_5580_firmwareRange≤33

AND

rockwellautomation guardlogix_5580Match-

[
  {
    "product": "Armor Compact GuardLogix 5370 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Armor GuardLogix Safety Controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CompactLogix 5370 L1 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CompactLogix 5370 L2 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CompactLogix 5370 L3 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Compact GuardLogix 5370 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ControlLogix 5570 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "versions 33 and prior",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
rockwellautomation	www.rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1130398
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-061-02

17 Jun 2026 03:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.8 - 8.6

EPSS0.0174

SSVC

CWE-20