High severity · published Jul 27, 2022
CVE-2020-6998
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow…
8.6
CVSS
3.2%
EPSS
No
On KEV
Description
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Armor Compact Guardlogix 5370 Firmware · Rockwellautomation
through 33 · source: NVD
CG
Compact Guardlogix 5370 Firmware · Rockwellautomation
through 33 · source: NVD
C5
Compactlogix 5370 L1 Firmware · Rockwellautomation
through 33 · source: NVD
C5
Compactlogix 5370 L2 Firmware · Rockwellautomation
through 33 · source: NVD
C5
Compactlogix 5370 L3 Firmware · Rockwellautomation
through 33 · source: NVD
C5
Controllogix 5570 Firmware · Rockwellautomation
through 33 · source: NVD
G5
Guardlogix 5560 Firmware · Rockwellautomation
through 33 · source: NVD
G5
Guardlogix 5570 Firmware · Rockwellautomation
through 33 · source: NVD
G5
Guardlogix 5580 Firmware · Rockwellautomation
through 33 · source: NVD
Affected product
AC
Armor Compact Guardlogix 5370 Firmware
Rockwellautomation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6998
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6998
Permissions Required
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1130398
Third Party Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-02
More from Armor Compact Guardlogix 5370 Firmware
9.8
CVE-2019-10952
An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability
7.5
CVE-2019-10954
An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370…