Description
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic
loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload
the user project file to bring the device back online and continue normal operation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | CompactLogix 5480 | 32.011 and later | — |
| Rockwell Automation | ControlLogix 5580 | 31.011 and later | — |
| Rockwell Automation | GuardLogix 5580 | 31.011 and later | — |
| Rockwell Automation | Compact GuardLogix 5380 | 31.011 and later | — |
| Rockwell Automation | CompactLogix 5380 | 31.011 and later | — |
Advisories 1
- ICSA-22-342-03 Rockwell Automation Logix controllers CISA ICS & IT advisories · Dec 8, 2022