CVE-2020-6085

Name of the Vulnerable Software and Affected Versions Allen-Bradley Flex IO 1794-AENT/B version 4.003

Description A denial of service issue exists in the ENIP Request Path Logical Segment functionality. This can be triggered by a specially crafted network request, specifically by sending an Electronic Key Segment with less than 0x18 bytes following the Key Format field, causing a loss of communications with the device.

Recommendations For Allen-Bradley Flex IO 1794-AENT/B version 4.003, as a temporary workaround, consider restricting access to the ENIP Request Path Logical Segment functionality until a patch is available. Avoid processing Electronic Key Segments with less than 0x18 bytes following the Key Format field to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.