high7.5
CVE-2022-2004
AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devi…
Impact
AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Automationdirect | D0-06dd1 Firmware | before 2.72 |
| Automationdirect | D0-06dd2 Firmware | before 2.72 |
| Automationdirect | D0-06dr Firmware | before 2.72 |
| Automationdirect | D0-06da Firmware | before 2.72 |
| Automationdirect | D0-06ar Firmware | before 2.72 |
| Automationdirect | D0-06aa Firmware | before 2.72 |
| Automationdirect | D0-06dd1-D Firmware | before 2.72 |
| Automationdirect | D0-06dd2-D Firmware | before 2.72 |
| Automationdirect | D0-06dr-D Firmware | before 2.72 |