Lucene search

IcscertCVE-2022-2004

HistoryAug 31, 2022 - 4:15 p.m.

CVE-2022-2004

2022-08-3116:15:10

CWE-400

icscert

web.nvd.nist.gov

automationdirect

directlogic

vulnerability

cve-2022-2004

plc

denial-of-service

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

30.1%

JSON

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Affected configurations

Nvd

Node

automationdirectd0-06dd1_firmwareRange<2.72

AND

automationdirectd0-06dd1Match-

Node

automationdirectd0-06dd2_firmwareRange<2.72

AND

automationdirectd0-06dd2Match-

Node

automationdirectd0-06dr_firmwareRange<2.72

AND

automationdirectd0-06drMatch-

Node

automationdirectd0-06da_firmwareRange<2.72

AND

automationdirectd0-06daMatch-

Node

automationdirectd0-06ar_firmwareRange<2.72

AND

automationdirectd0-06arMatch-

Node

automationdirectd0-06aa_firmwareRange<2.72

AND

automationdirectd0-06aaMatch-

Node

automationdirectd0-06dd1-d_firmwareRange<2.72

AND

automationdirectd0-06dd1-dMatch-

Node

automationdirectd0-06dd2-d_firmwareRange<2.72

AND

automationdirectd0-06dd2-dMatch-

Node

automationdirectd0-06dr-d_firmwareRange<2.72

AND

automationdirectd0-06dr-dMatch-

VendorProductVersionCPE
automationdirectd0-06dd1_firmware*cpe:2.3:o:automationdirect:d0-06dd1_firmware:*:*:*:*:*:*:*:*
automationdirectd0-06dd1-cpe:2.3:h:automationdirect:d0-06dd1:-:*:*:*:*:*:*:*
automationdirectd0-06dd2_firmware*cpe:2.3:o:automationdirect:d0-06dd2_firmware:*:*:*:*:*:*:*:*
automationdirectd0-06dd2-cpe:2.3:h:automationdirect:d0-06dd2:-:*:*:*:*:*:*:*
automationdirectd0-06dr_firmware*cpe:2.3:o:automationdirect:d0-06dr_firmware:*:*:*:*:*:*:*:*
automationdirectd0-06dr-cpe:2.3:h:automationdirect:d0-06dr:-:*:*:*:*:*:*:*
automationdirectd0-06da_firmware*cpe:2.3:o:automationdirect:d0-06da_firmware:*:*:*:*:*:*:*:*
automationdirectd0-06da-cpe:2.3:h:automationdirect:d0-06da:-:*:*:*:*:*:*:*
automationdirectd0-06ar_firmware*cpe:2.3:o:automationdirect:d0-06ar_firmware:*:*:*:*:*:*:*:*
automationdirectd0-06ar-cpe:2.3:h:automationdirect:d0-06ar:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
automationdirect	d0-06dd1_firmware	*	cpe:2.3:o:automationdirect:d0-06dd1_firmware::::::::
automationdirect	d0-06dd1	-	cpe:2.3:h:automationdirect:d0-06dd1:-:::::::*
automationdirect	d0-06dd2_firmware	*	cpe:2.3:o:automationdirect:d0-06dd2_firmware::::::::
automationdirect	d0-06dd2	-	cpe:2.3:h:automationdirect:d0-06dd2:-:::::::*
automationdirect	d0-06dr_firmware	*	cpe:2.3:o:automationdirect:d0-06dr_firmware::::::::
automationdirect	d0-06dr	-	cpe:2.3:h:automationdirect:d0-06dr:-:::::::*
automationdirect	d0-06da_firmware	*	cpe:2.3:o:automationdirect:d0-06da_firmware::::::::
automationdirect	d0-06da	-	cpe:2.3:h:automationdirect:d0-06da:-:::::::*
automationdirect	d0-06ar_firmware	*	cpe:2.3:o:automationdirect:d0-06ar_firmware::::::::
automationdirect	d0-06ar	-	cpe:2.3:h:automationdirect:d0-06ar:-:::::::*

Rows per page:

1-10 of 181

CNA Affected

[
  {
    "product": "DirectLOGIC D0-06 series CPUs",
    "vendor": "AutomationDirect",
    "versions": [
      {
        "lessThan": "2.72",
        "status": "affected",
        "version": "D0-06DD1",
        "versionType": "custom"
      },
      {
        "lessThan": "2.72",
        "status": "affected",
        "version": "D0-06DD2",
        "versionType": "custom"
      },
      {
        "lessThan": "2.72",
        "status": "affected",
        "version": "D0-06DR",
        "versionType": "custom"
      },
      {
        "lessThan": "2.72",
        "status": "affected",
        "version": "D0-06DA",
        "versionType": "custom"
      },
      {
        "lessThan": "2.72",
        "status": "affected",
        "version": "D0-06AR",
        "versionType": "custom"
      },
      {
        "lessThan": "2.72",
        "status": "affected",
        "version": "D0-06AA",
        "versionType": "custom"
      },
      {
        "lessThan": "2.72",
        "status": "affected",
        "version": "D0-06DD1-D",
        "versionType": "custom"
      },
      {
        "lessThan": "2.72",
        "status": "affected",
        "version": "D0-06DD2-D",
        "versionType": "custom"
      },
      {
        "lessThan": "2.72",
        "status": "affected",
        "version": "D0-06DR-D",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/uscert/ics/advisories/icsa-22-167-03

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

30.1%

JSON

Related for CVE-2022-2004