PT-2022-24017 · Rockwell Automation · Logix Controllers

Published 2022-12-19 · Updated 2022-12-27 · CVE-2022-3752

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Rockwell Automation Logix controllers (affected versions not specified)

Description An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in the controllers, resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-3752

Affected Products

Logix Controllers

References · 6

• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137664 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3752 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3752 · Security Note
• https://t.me/cvenotify/40207 · Telegram Post
• https://t.me/cibsecurity/54941 · Telegram Post
• https://t.me/cvenotify/40217 · Telegram Post