CVE:CVE-2017-9312
CNNVD:CNNVD-201705-1396
Rockwell Automation Allen-Bradley Compact GuardLogix 5370 controller等都是美国罗克韦尔（Rockwell Automation）公司的可编程逻辑控制器产品。
多款Rockwell Automation产品中存在输入验证漏洞。攻击者可借助特制的TCP数据包利用该漏洞造成拒绝服务（设备重启）。以下产品和版本受到影响：Rockwell Automation Allen-Bradley Compact GuardLogix 5370 controller 30.012及之前版本；Allen-Bradley Armor CompactLogix 5370 L3 controller 30.012及之前版本；Allen-Bradley Armor Compact GuardLogix 5370 controller 30.012及之前版本；Allen-Bradley CompactLogix 5370 L3 controller 30.012及之前版本；Allen-Bradley CompactLogix 5370 L2 controller 30.012及之前版本；Allen-Bradley CompactLogix 5370 L1 controller 30.012及之前版本。
solution:Upgrade rockwellautomation allen-bradley_l30erms_firmware to a higher version than 30,and avoid the version (,30]