CVE-2022-2004CWE-400

AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

High · published August 31, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00983 · 62.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-08-31T15:59Z
EPSS history
Timeline
  • 31 AUG 15:59Z
    AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption
    cvelistv5