CVE:CVE-2020-6998
CNNVD:CNNVD-202103-220
Rockwell Automation CompactLogix 5370是美国罗克韦尔（Rockwell Automation）公司的一款可编程逻辑控制器。
Rockwell Automation CompactLogix 5370 and ControlLogix 5570 存在输入验证错误漏洞，该漏洞允许攻击者向控制器发送专门制作的CIP包请求，这可能导致与其他产品通信时出现拒绝服务条件。
solution:Upgrade rockwellautomation armor_compact_guardlogix_5370_firmware to a higher version than 33,and avoid the version (,33]; Upgrade rockwellautomation compact_guardlogix_5370_firmware to a higher version than 33,and avoid the version (,33]; Upgrade rockwellautomation compactlogix_5370_l1_firmware to a higher version than 33,and avoid the version (,33]; Upgrade rockwellautomation compactlogix_5370_l2_firmware to a higher version than 33,and avoid the version (,33]; Upgrade rockwellautomation compactlogix_5370_l3_firmware to a higher version than 33,and avoid the version (,33]; Upgrade rockwellautomation controllogix_5570_firmware to a higher version than 33,and avoid the version (,33]; Upgrade rockwellautomation guardlogix_5560_firmware to a higher version than 33,and avoid the version (,33]; Upgrade rockwellautomation guardlogix_5570_firmware to a higher version than 33,and avoid the version (,33]; Upgrade rockwellautomation guardlogix_5580_firmware to a higher version than 33,and avoid the version (,33]