CVE-2022-2004

Name of the Vulnerable Software and Affected Versions AutomationDirect DirectLOGIC D0-06 series CPUs versions prior to 2.72

Description The issue is related to an uncontrolled resource consumption in the communication modules H0-ECOM and H0-ECOM100 Ethernet controllers of DirectLOGIC. An attacker can exploit this by sending a specially crafted packet to cause a denial-of-service condition, preventing access from DirectSoft and other devices.

Recommendations For AutomationDirect DirectLOGIC D0-06 series CPUs versions prior to 2.72, update to version 2.72 or later to resolve the issue.