Description
A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | CompactLogix 5370 | 20 – ≤ 33 | — |
| Rockwell Automation | Compact GuardLogix | 28 – ≤ 33 | — |
| Rockwell Automation | ControlLogix 5570 | 20 – ≤ 33 | — |
| Rockwell Automation | ControlLogix 5570 Redundancy | 20 – ≤ 33 | — |
| Rockwell Automation | GuardLogix 5570 | 20 – ≤ 33 | — |
Advisories 1
- ICSA-22-354-02 Rockwell Automation GuardLogix and ControlLogix controllers CISA ICS & IT advisories · Dec 20, 2022