Описание
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.
Затрагиваемое ПО
Rockwellautomation Compactlogix 5380 firmwareRockwellautomation Compactlogix 5380Rockwellautomation Compact guardlogix 5380 sil 2 firmwareRockwellautomation Compact guardlogix 5380 sil 2Rockwellautomation Compact guardlogix 5380 sil 3 firmwareRockwellautomation Compact guardlogix 5380 sil 3Rockwellautomation Compactlogix 5480 firmwareRockwellautomation Compactlogix 5480Rockwellautomation Controllogix 5580 firmwareRockwellautomation Controllogix 5580Rockwellautomation Guardlogix 5580 firmwareRockwellautomation Guardlogix 5580Rockwellautomation 1756-en4 firmwareRockwellautomation 1756-en4
CVSS
| Балл | 7.5 — высокая |
| Вектор | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Источники
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1963.html