CVE-2020-6998
Rockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Rockwell Automation Armor Compact GuardLogix 5370 controllers
Version range not reported
- Rockwell Automation Armor GuardLogix Safety Controllers
Version range not reported
- Rockwell Automation CompactLogix 5370 L1 controllers
Version range not reported
- Rockwell Automation CompactLogix 5370 L2 controllers
Version range not reported
- Rockwell Automation CompactLogix 5370 L3 controllers
Version range not reported
- Rockwell Automation Compact GuardLogix 5370 controllers
Version range not reported
- Rockwell Automation ControlLogix 5570 controllers
Version range not reported