CVE-2020-6084

Name of the Vulnerable Software and Affected Versions Allen-Bradley Flex IO 1794-AENT/B version 4.003

Description A denial of service issue exists in the ENIP Request Path Logical Segment functionality. This can be triggered by a specially crafted network request, specifically by sending an Electronic Key Segment with less bytes than required by the Key Format Table, causing a loss of communications with the device.

Recommendations For version 4.003, consider restricting access to the ENIP Request Path Logical Segment functionality until a patch is available. As a temporary workaround, monitor network traffic for malicious packets that may trigger this issue.