{"id":"CVE-2024-3493","state":"PUBLISHED","title":"Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value","description":"\nA specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices. \n\n","publishedAt":"2024-04-15T21:17:36.077Z","updatedAt":"2024-08-12T15:16:08.155Z","severity":{"score":8.6,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","source":"Rockwell"},"assigner":"Rockwell","products":["Rockwell Automation ControlLogix 5580","Rockwell Automation GuardLogix 5580","Rockwell Automation CompactLogix 5380","Rockwell Automation 1756-EN4TR"],"affected":[{"vendor":"Rockwell Automation","product":"ControlLogix 5580","defaultStatus":"unaffected","versions":[{"version":"v35.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"GuardLogix 5580","defaultStatus":"unaffected","versions":[{"version":"v35.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"CompactLogix 5380","defaultStatus":"unaffected","versions":[{"version":"v5.001","status":"affected"}]},{"vendor":"Rockwell Automation","product":"1756-EN4TR","defaultStatus":"unaffected","versions":[{"version":"v5.001","status":"affected"}]}],"references":["https://www.rockwellautomation.com/en-us/support/advisory.SD1666.html"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/3xxx/CVE-2024-3493.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-3493","state":"PUBLISHED","datePublished":"2024-04-15T21:17:36.077Z","dateUpdated":"2024-08-12T15:16:08.155Z","assignerShortName":"Rockwell","assignerOrgId":"b73dd486-f505-4403-b634-40b078b177f0","dateReserved":"2024-04-08T21:46:38.867Z"},"containers":{"cna":{"title":"Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value","descriptions":[{"lang":"en","value":"\nA specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices. \n\n"}],"affected":[{"vendor":"Rockwell Automation","product":"ControlLogix 5580","defaultStatus":"unaffected","versions":[{"version":"v35.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"GuardLogix 5580","defaultStatus":"unaffected","versions":[{"version":"v35.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"CompactLogix 5380","defaultStatus":"unaffected","versions":[{"version":"v5.001","status":"affected"}]},{"vendor":"Rockwell Automation","product":"1756-EN4TR","defaultStatus":"unaffected","versions":[{"version":"v5.001","status":"affected"}]}],"references":[{"url":"https://www.rockwellautomation.com/en-us/support/advisory.SD1666.html"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Rockwell","orgId":"b73dd486-f505-4403-b634-40b078b177f0","dateUpdated":"2024-04-15T21:29:33.269Z"},"datePublic":"2024-04-12T01:00:00.000Z","impacts":[{"capecId":"CAPEC-137","descriptions":[{"lang":"en","value":"CAPEC-137 Parameter Injection"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"\n\n

\n\n


Affected Product

 

 

 

 

First Known in Firmware Revision

 

 

 

 

Corrected in Firmware Revision

 

 

 

 

ControlLogix® 5580

 

 

 

 

V35.011

 

 

 

 

V35.013, V36.011

 

 

 

 

GuardLogix 5580

 

 

 

 

V35.011

 

 

 

 

V35.013, V36.011

 

 

 

 

CompactLogix 5380

 

 

 

 

V35.011

 

 

 

 

V35.013, V36.011

 

 

 

 

1756-EN4TR

 

 

 

 

V5.001

 

 

 

 

V6.001

 

 

\n\n

Users using the affected software and who are not able to upgrade to one of the corrected versions are encouraged to apply security best practices, where possible.  

\n\n
"}],"value":"\nAffected Product\n\n \n\n \n\n \n\n \n\nFirst Known in Firmware Revision\n\n \n\n \n\n \n\n \n\nCorrected in Firmware Revision\n\n \n\n \n\n \n\n \n\nControlLogix® 5580\n\n \n\n \n\n \n\n \n\nV35.011\n\n \n\n \n\n \n\n \n\nV35.013, V36.011\n\n \n\n \n\n \n\n \n\nGuardLogix 5580\n\n \n\n \n\n \n\n \n\nV35.011\n\n \n\n \n\n \n\n \n\nV35.013, V36.011\n\n \n\n \n\n \n\n \n\nCompactLogix 5380\n\n \n\n \n\n \n\n \n\nV35.011\n\n \n\n \n\n \n\n \n\nV35.013, V36.011\n\n \n\n \n\n \n\n \n\n1756-EN4TR\n\n \n\n \n\n \n\n \n\nV5.001\n\n \n\n \n\n \n\n \n\nV6.001\n\n \n\n \n\nUsers using the affected software and who are not able to upgrade to one of the corrected versions are encouraged to apply security best practices, where possible.  \n\n * Security Best Practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight  \n\n"}],"source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.rockwellautomation.com/en-us/support/advisory.SD1666.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T20:12:07.675Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"rockwellautomation","product":"guardlogix_5580_firmware","defaultStatus":"unknown","versions":[{"version":"35.011","status":"affected"}],"cpes":["cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:35.011:*:*:*:*:*:*:*"]},{"vendor":"rockwellautomation","product":"compactlogix_5380_firmware","defaultStatus":"unknown","versions":[{"version":"35.011","status":"affected"}],"cpes":["cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:5.001:*:*:*:*:*:*:*"]},{"vendor":"rockwellautomation","product":"1756-en4tr_firmware","defaultStatus":"unknown","versions":[{"version":"5.001","status":"affected"}],"cpes":["cpe:2.3:o:rockwellautomation:1756-en4tr_firmware:5.001:*:*:*:*:*:*:*"]},{"vendor":"rockwellautomation","product":"1756-en4tr_firmware","defaultStatus":"unknown","versions":[{"version":"5.001","status":"affected"}],"cpes":["cpe:2.3:o:rockwellautomation:1756-en4tr_firmware:5.001:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-12T15:09:28.736089Z","id":"CVE-2024-3493","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-12T15:16:08.155Z"}}]}}}