Lucene search

[email protected]CVE-2022-1797

HistoryJun 02, 2022 - 2:15 p.m.

CVE-2022-1797

2022-06-0214:15:33

CWE-400

[email protected]

web.nvd.nist.gov

cve-2022-1797

denial of service

industrial protocol

rockwell automation

logix controllers

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.

Affected configurations

NVD

Node

rockwellautomationcompactlogix_5380_firmwareRange<33.011

AND

rockwellautomationcompactlogix_5380Match-

Node

rockwellautomationcompact_guardlogix_5380_firmwareRange<33.011

AND

rockwellautomationcompact_guardlogix_5380Match-

Node

rockwellautomationcompactlogix_5480_firmwareRange<33.011

AND

rockwellautomationcompactlogix_5480Match-

Node

rockwellautomationcontrollogix_5580_firmwareRange<33.011

AND

rockwellautomationcontrollogix_5580Match-

Node

rockwellautomationguardlogix_5580_firmwareRange<33.011

AND

rockwellautomationguardlogix_5580Match-

Node

rockwellautomationcompactlogix_5370_firmwareRange<34.011

AND

rockwellautomationcompactlogix_5370Match-

Node

rockwellautomationcompact_guardlogix_5370Match-

AND

rockwellautomationcompact_guardlogix_5370_firmwareRange<34.011

Node

rockwellautomationcontrollogix_5570Match-

AND

rockwellautomationcontrollogix_5570_firmwareRange<34.011

Node

rockwellautomationguardlogix_5570Match-

AND

rockwellautomationguardlogix_5570_firmwareRange<34.011

CPENameOperatorVersion
rockwellautomation:compactlogix_5380_firmwarerockwellautomation compactlogix 5380 firmwarelt33.011

CPE	Name	Operator	Version
rockwellautomation:compactlogix_5380_firmware	rockwellautomation compactlogix 5380 firmware	lt	33.011

CNA Affected

[
  {
    "product": "CompactLogix 5380 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "32.013",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Compact GuardLogix 5380 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "32.013",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CompactLogix 5480 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "32.013",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ControlLogix 5580 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "32.013",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "GuardLogix 5580 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "32.013",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CompactLogix 5370 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "33.013",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Compact GuardLogix 5370 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "33.013",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ControlLogix 5570 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "lessThanOrEqual": "33.013",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "GuardLogix 5570 controllers",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "33.013"
      }
    ]
  }
]

References

rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1135559

www.cisa.gov/uscert/ics/advisories/icsa-22-144-01

Social References

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Related for CVE-2022-1797

nvd1 ics1 nessus1 prion1 cvelist1