Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mjg4-p237-8j88

Опубликовано: 16 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.

EPSS

Процентиль: 23%
0.00076
Низкий

8.6 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.6
nvd
почти 2 года назад

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.

CVSS3: 8.6
fstec
почти 2 года назад

Уязвимость микропрограммного обеспечения программируемых логических контроллеров ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, Compact GuardLogix 5380 и 1756-EN4TR, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 23%
0.00076
Низкий

8.6 High

CVSS3

Дефекты

CWE-20