CVEvulnerability

CVE-2022-2004

7.5 HIGH Published 2022-08-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400

Description

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Affected configurations

• automationdirect d0-06dd1 firmware (< 2.72) • automationdirect d0-06dd2 firmware (< 2.72) • automationdirect d0-06dr firmware (< 2.72) • automationdirect d0-06da firmware (< 2.72) • automationdirect d0-06ar firmware (< 2.72) • automationdirect d0-06aa firmware (< 2.72) • automationdirect d0-06dd1-d firmware (< 2.72) • automationdirect d0-06dd2-d firmware (< 2.72) • automationdirect d0-06dr-d firmware (< 2.72)

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References