CVE-2021-33012

Опубликовано: 09 июл. 2021

Источник: nvd

CVSS3: 8.6

CVSS2: 5

EPSS Низкий

Описание

Rockwell Automation MicroLogix 1100, all versions, allows a remote, unauthenticated attacker sending specially crafted commands to cause the PLC to fault when the controller is switched to RUN mode, which results in a denial-of-service condition. If successfully exploited, this vulnerability will cause the controller to fault whenever the controller is switched to RUN mode.

Ссылки

https://us-cert.cisa.gov/ics/advisories/icsa-21-189-01
Third Party Advisory
US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-21-189-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:rockwellautomation:micrologix_1100_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:micrologix_1100:-:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02742

Низкий

8.6 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

NVD-CWE-noinfo

Связанные уязвимости

GHSA-m5fq-q49w-wc2j

github

больше 3 лет назад