CVE-2022-2004

AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

State
Published
Severity
7.5 High
Published
Aug 31, 2022
Updated
Apr 16, 2025
Reserved
Jun 6, 2022

Read the record on cve.org

Description

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hicscert

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
DirectLOGIC D0-06 series CPUsAutomationDirect
  • D0-06DD1 to before 2.72Affected
  • D0-06DD2 to before 2.72Affected
  • D0-06DR to before 2.72Affected
  • D0-06DA to before 2.72Affected
  • D0-06AR to before 2.72Affected
  • D0-06AA to before 2.72Affected
  • D0-06DD1-D to before 2.72Affected
  • D0-06DD2-D to before 2.72Affected
  • D0-06DR-D to before 2.72Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.