CVE:CVE-2022-1797
CNNVD:CNNVD-202205-4082
Rockwell Automation Logix Controllers是美国Rockwell Automation公司的一个高性能控制平台。使用这个单一平台以任意组合执行顺序、过程、驱动或运动控制。
Rockwell Automation Logix Controllers 存在资源管理错误漏洞，该漏洞源于应用程序没有正确控制内部资源的消耗。 远程攻击者可以使用特制的第 3 类通用工业协议消息，触发资源耗尽并执行拒绝服务 (DoS) 攻击。
solution:Upgrade rockwellautomation compactlogix_5380_firmware to a higher version than 33.011,and avoid the version (,33.011); Upgrade rockwellautomation compact_guardlogix_5380_firmware to a higher version than 33.011,and avoid the version (,33.011); Upgrade rockwellautomation compactlogix_5480_firmware to a higher version than 33.011,and avoid the version (,33.011); Upgrade rockwellautomation controllogix_5580_firmware to a higher version than 33.011,and avoid the version (,33.011); Upgrade rockwellautomation guardlogix_5580_firmware to a higher version than 33.011,and avoid the version (,33.011); Upgrade rockwellautomation compactlogix_5370_firmware to a higher version than 34.011,and avoid the version (,34.011); Upgrade rockwellautomation compact_guardlogix_5370_firmware to a higher version than 34.011,and avoid the version (,34.011); Upgrade rockwellautomation controllogix_5570_firmware to a higher version than 34.011,and avoid the version (,34.011); Upgrade rockwellautomation guardlogix_5570_firmware to a higher version than 34.011,and avoid the version (,34.011)