Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-40619

Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling

Description

CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation ControlLogix® 5580

Default version status: unaffected

  • 34.011affected

Rockwell Automation GuardLogix 5580

Default version status: unaffected

  • 34.011affected

References