A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability. The software is a communication server for the MicroLogix 1100 Programmable Controller. It helps plant devices communicate with other Rockwell server and client applications. An update is available for affected customers and the vulnerability has been fixed, says Cisco Talos.”]
Source: https://blog.talosintelligence.com/2021/01/vuln-spotlight-denial-rockwell-automation-jan-2021.html