CVE-2017-6024
Published May 6, 2017
Last updated 3 years ago
Overview
- Description
- A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause a denial of service condition by sending a series of specific CIP-based commands to the controller.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.9
- Impact score
- 3.6
- Exploitability score
- 2.2
- Vector string
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 7.1
- Impact score
- 6.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:N/A:C
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EDD040ED-B44C-47D0-B4D4-729C378C4F68"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:v28.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DEA0815-1269-4B24-B7D5-5B5BE06B8E43"
},
{
"criteria": "cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:v29.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "771314D1-C8A2-4A9F-A4AB-24C767BB48DA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "51BB883B-B863-4D57-B1C0-FC7B3EBD1EA0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "489DD270-EBC9-4848-BE4C-4FB2D1786521"
},
{
"criteria": "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.012:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FEAFDB5D-4B06-47D4-96D6-BF24FEEA0749"
},
{
"criteria": "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F8BC8FB-B3E9-43CB-B8C6-807DCBC0204C"
},
{
"criteria": "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v29.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D073C02-AE97-4D14-9682-84B42D0FBDA5"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]