PT-2021-2365 · Rockwell Automation · Compactlogix 5370+7

Published 2021-03-02 · Updated 2022-08-04 · CVE-2020-6998

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation CompactLogix 5370 versions prior to 34 Rockwell Automation ControlLogix 5570 versions prior to 34 Rockwell Automation CompactLogix 5370 L1 versions prior to 34 Rockwell Automation CompactLogix 5370 L2 versions prior to 34 Rockwell Automation CompactLogix 5370 L3 versions prior to 34 Rockwell Automation Compact GuardLogix 5370 versions prior to 34 Rockwell Automation GuardLogix 5370 versions prior to 34 Rockwell Automation Compact GuardLogix versions prior to 34

Description The connection establishment algorithm in the affected products does not manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products. An attacker can exploit this issue by sending a specially crafted CIP packet, potentially leading to a denial-of-service condition.

Recommendations For Rockwell Automation CompactLogix 5370 versions prior to 34, update to version 34 or later. For Rockwell Automation ControlLogix 5570 versions prior to 34, update to version 34 or later. For Rockwell Automation CompactLogix 5370 L1 versions prior to 34, update to version 34 or later. For Rockwell Automation CompactLogix 5370 L2 versions prior to 34, update to version 34 or later. For Rockwell Automation CompactLogix 5370 L3 versions prior to 34, update to version 34 or later. For Rockwell Automation Compact GuardLogix 5370 versions prior to 34, update to version 34 or later. For Rockwell Automation GuardLogix 5370 versions prior to 34, update to version 34 or later. For Rockwell Automation Compact GuardLogix versions prior to 34, update to version 34 or later.

Fix

Infinite Loop

RCE

Weakness Enumeration

CWE-835

CWE-20

Related Identifiers

BDU:2021-01605

CVE-2020-6998

Affected Products

Compact Guardlogix

Compact Guardlogix 5370

Compactlogix 5370

Compactlogix 5370 L1

Compactlogix 5370 L2

Compactlogix 5370 L3

Controllogix 5570

Guardlogix 5370

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2020-6998 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6998 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01605 · Security Note
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1130398 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-21-061-02 · Note
• https://us-cert.gov/ics/advisories/icsa-21-061-02 · Note
• https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&refSoft=1&toggleState=&versions=59325,59316 · Note
• https://t.me/cibsecurity/47125 · Telegram Post
• https://cybersecurity-help.cz/vulnerabilities/51180 · Note
• https://compatibility.rockwellautomation.com/Pages/MultiProductFindDownloads.aspx?crumb=112&refSoft=1&toggleState=&versions=59325,59316 · Note