Skip to content
OpenAdvisories
High · 7.5 CVE-2022-2004 EUVD-2022-34310GHSA-5pc3-4p3v-hv92

AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

Published Aug 31, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Affected products

VendorProductAffectedFixed
AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 – < 2.72, D0-06DD2 – < 2.72, D0-06DR – < 2.72, D0-06DA – < 2.72, D0-06AR – < 2.72, D0-06AA – < 2.72, D0-06DD1-D – < 2.72, D0-06DD2-D – < 2.72, D0-06DR-D – < 2.72 2.72

Advisories 1

References