7.8
CVSSv2

CVE-2022-1797

Published: 02/06/2022 Updated: 11/06/2022
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
CVSS v3 Base Score: 8.6 | Impact Score: 4 | Exploitability Score: 3.9
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

rockwellautomation compactlogix_5380_firmware

rockwellautomation compact_guardlogix_5380_firmware

rockwellautomation compactlogix_5480_firmware

rockwellautomation controllogix_5580_firmware

rockwellautomation guardlogix_5580_firmware

rockwellautomation compactlogix_5370_firmware

rockwellautomation compact_guardlogix_5370_firmware

rockwellautomation controllogix_5570_firmware

rockwellautomation guardlogix_5570_firmware