CVE-2020-6998
Last modified
CVE-2020-6998 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products.. EPSS estimates a 1.74% chance of exploitation in the next 30 days.
Description
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to send specially crafted CIP packet requests to a controller, which may cause denial-of-service conditions in communications with other products.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Armor Compact Guardlogix 5370 Firmware | <= 33 |
| Rockwellautomation | Compact Guardlogix 5370 Firmware | <= 33 |
| Rockwellautomation | Compactlogix 5370 L1 Firmware | <= 33 |
| Rockwellautomation | Compactlogix 5370 L2 Firmware | <= 33 |
| Rockwellautomation | Compactlogix 5370 L3 Firmware | <= 33 |
| Rockwellautomation | Controllogix 5570 Firmware | <= 33 |
| Rockwellautomation | Guardlogix 5560 Firmware | <= 33 |
| Rockwellautomation | Guardlogix 5570 Firmware | <= 33 |
| Rockwellautomation | Guardlogix 5580 Firmware | <= 33 |
References
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1130398Permissions Required, Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-02Third Party Advisory, US Government Resource
- https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1130398Permissions Required, Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-061-02Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-6998?
How severe is CVE-2020-6998?
How do I fix CVE-2020-6998?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-6992A local privilege escalation vulnerability has been identifi…6.7
- CVE-2020-6993In Moxa PT-7528 series firmware, Version 4.0 or lower, and P…7.5
- CVE-2020-6994A buffer overflow vulnerability was found in some devices of…9.8
- CVE-2020-6995In Moxa PT-7528 series firmware, Version 4.0 or lower, and P…9.8
- CVE-2020-6996Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation…9.8
- CVE-2020-6997In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sen…7.5
- CVE-2020-6999In Moxa EDS-G516E Series firmware, Version 5.2 or lower, som…6.5
- CVE-2020-7000VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Mod…7.5
- CVE-2020-7001In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the…7.5
- CVE-2020-7002Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 a…7.8
- CVE-2020-7003In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, …7.5
- CVE-2020-7004VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Mod…8.8
Are you affected by CVE-2020-6998?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST