PT-2022-9278
CVE-2021-22800
·
Published
2022-02-11
·
Updated
2022-02-18
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Modicon M218 Logic Controller versions prior to V5.1.0.6
Description
A vulnerability exists due to improper input validation, which could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP.
Recommendations
For versions prior to V5.1.0.6, update to a version newer than V5.1.0.6 to resolve the issue. As a temporary workaround, consider restricting access to network port 1105/TCP to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾