CVE-2022-1797: Rockwell Automation Logix Controllers Uncontrolled Resource Consumption
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-1797?
CVE-2022-1797 is a vulnerability that allows a malformed Class 3 common industrial protocol message to cause a denial-of-service condition in Rockwell Automation Logix Controllers.
How does CVE-2022-1797 impact Rockwell Automation Logix Controllers?
CVE-2022-1797 can result in a major nonrecoverable fault and requires the user to clear the fault and redownload the target device if it becomes unavailable.
What is the severity of CVE-2022-1797?
CVE-2022-1797 has a severity rating of 8.6 (High).
Which software versions are affected by CVE-2022-1797?
Rockwellautomation Compactlogix 5380 Firmware versions up to 33.011, Rockwellautomation Compact Guardlogix 5380 Firmware versions up to 33.011, Rockwellautomation Compactlogix 5480 Firmware versions up to 33.011, Rockwellautomation Controllogix 5580 Firmware versions up to 33.011, Rockwellautomation Guardlogix 5580 Firmware versions up to 33.011, Rockwellautomation Compactlogix 5370 Firmware versions up to 34.011, Rockwellautomation Compact Guardlogix 5370 Firmware versions up to 34.011, Rockwellautomation Controllogix 5570 Firmware versions up to 34.011, and Rockwellautomation Guardlogix 5570 Firmware versions up to 34.011 are affected by CVE-2022-1797.
How can I fix CVE-2022-1797?
To fix CVE-2022-1797, update the affected Rockwell Automation Logix Controllers firmware to versions beyond the vulnerable versions mentioned in the answer above.