Rockwell Automation Logix controllers
view advisory published 2022-12-08
Successful exploitation of this vulnerability could allow an unauthorized user to cause denial-of-service condition on a targeted device.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3752US | high7.5 | — | ||
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic
loading to cause a denial-of-service condition in Rockwell Automat… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-342-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (5)
- MitigationCompact GuardLogix 5380 controllers
32.016 and later for versions 32
- MitigationCompactLogix 5380 controllers
32.016 and later for versions 32
- MitigationCompactLogix 5480 controllers
32.016 and later for versions 32
- MitigationControlLogix 5580 controllers
32.016 and later for versions 32
- MitigationGuardLogix 5580 controllers
32.016 and later for versions 32
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan