Description
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | CompactLogix 5380 controllers | unspecified – ≤ 32.013 | — |
| Rockwell Automation | Compact GuardLogix 5380 controllers | unspecified – ≤ 32.013 | — |
| Rockwell Automation | CompactLogix 5480 controllers | unspecified – ≤ 32.013 | — |
| Rockwell Automation | ControlLogix 5580 controllers | unspecified – ≤ 32.013 | — |
| Rockwell Automation | GuardLogix 5580 controllers | unspecified – ≤ 32.013 | — |
| Rockwell Automation | CompactLogix 5370 controllers | unspecified – ≤ 33.013 | — |
| Rockwell Automation | Compact GuardLogix 5370 controllers | unspecified – ≤ 33.013 | — |
| Rockwell Automation | ControlLogix 5570 controllers | unspecified – ≤ 33.013 | — |
| Rockwell Automation | GuardLogix 5570 controllers | 33.013 | — |
Advisories 1
- ICSA-22-144-01 Rockwell Automation Logix Controllers CISA ICS & IT advisories · May 24, 2022