CVE-2017-6024

Опубликовано: 06 мая 2017

Источник: nvd

CVSS3: 5.9

CVSS2: 7.1

EPSS Низкий

Описание

A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause a denial of service condition by sending a series of specific CIP-based commands to the controller.

Ссылки

http://www.securityfocus.com/bid/98309
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-094-05
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/98309
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-094-05
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:v28.011:*:*:*:*:*:*:*

cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:v29.011:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.011:*:*:*:*:*:*:*

cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.012:*:*:*:*:*:*:*

cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.013:*:*:*:*:*:*:*

cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v29.011:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00049

Низкий

5.9 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-400

Связанные уязвимости

GHSA-v2x5-jq6x-q6hf