Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-2004

AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AutomationDirect DirectLOGIC D0-06 series CPUs

  • D0-06DD1 to < 2.72affected
  • D0-06DD2 to < 2.72affected
  • D0-06DR to < 2.72affected
  • D0-06DA to < 2.72affected
  • D0-06AR to < 2.72affected
  • D0-06AA to < 2.72affected
  • D0-06DD1-D to < 2.72affected
  • D0-06DD2-D to < 2.72affected
  • D0-06DR-D to < 2.72affected

References