CVE-2022-2004 AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption

What is CVE-2022-2004?

CVE-2022-2004 is a high-severity denial of service vulnerability in AutomationDirect DirectLOGIC D0-06 series CPUs, published on 31 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent access from DirectSoft and other devices, causing a denial-of-service condition. This issue affects: AutomationDirect DirectLOGIC D0-06 series CPUs D0-06DD1 versions prior to 2.72; D0-06DD2 versions prior to 2.72; D0-06DR versions prior to 2.72; D0-06DA versions prior to 2.72; D0-06AR versions prior to 2.72; D0-06AA versions prior to 2.72; D0-06DD1-D versions prior to 2.72; D0-06DD2-D versions prior to 2.72; D0-06DR-D versions prior to 2.72;

Weakness: CWE-400

Which versions are affected by CVE-2022-2004?

It affects 9 products.

Products include Automationdirect D0-06aa Firmware, Automationdirect D0-06ar Firmware, Automationdirect D0-06da Firmware, Automationdirect D0-06dd1-D Firmware, Automationdirect D0-06dd1 Firmware, Automationdirect D0-06dd2-D Firmware and 3 more.

How do I fix CVE-2022-2004?

No fix has been published for CVE-2022-2004 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2022-2004 being exploited?

There is no known exploitation of CVE-2022-2004 in the wild and no public exploit code.

Other vulnerabilities in AutomationDirect DirectLOGIC D0-06 series CPUs

• CVE-2022-2003 AutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission High 7.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5pc3-4p3v-hv92.