ICSA-22-144-01

icsaUScisa_csaf_ot

Rockwell Automation Logix Controllers

view advisory published 2022-05-24

Successful exploitation of this vulnerability may allow an unauthorized user to send malicious messages to the targeted device, which could lead to a denial-of-service condition.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-1797UShigh8.6—
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a maj…
02

references

External citations — patches, advisories, analysis.

03

remediations (9)

  • MitigationCompact GuardLogix 5370 controllers

    CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570: Upgrade to v34.011 firmware

  • MitigationCompact GuardLogix 5380 controllers

    CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570: Upgrade to v34.011 firmware

  • MitigationCompactLogix 5370 controllers

    CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570: Upgrade to v34.011 firmware

  • MitigationCompactLogix 5380 controllers

    CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570: Upgrade to v34.011 firmware

  • MitigationCompactLogix 5480 controllers

    CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570: Upgrade to v34.011 firmware

  • MitigationControlLogix 5570 controllers

    CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570: Upgrade to v34.011 firmware

  • MitigationControlLogix 5580 controllers

    CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570: Upgrade to v34.011 firmware

  • MitigationGuardLogix 5570 controllers

    CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570: Upgrade to v34.011 firmware

  • MitigationGuardLogix 5580 controllers

    CompactLogix 5370, Compact GuardLogix 5370, ControlLogix 5570, GuardLogix 5570: Upgrade to v34.011 firmware

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan