Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-6077

Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation CompactLogix 5380

Default version status: unaffected

  • v.32 .011affected

Rockwell Automation CompactLogix 5380 Process

Default version status: unaffected

  • v.33.011affected

Rockwell Automation Compact GuardLogix 5380 SIL 2

Default version status: unaffected

  • v.32.013affected

Rockwell Automation Compact GuardLogix 5380 SIL 3

Default version status: unaffected

  • v.32.011affected

Rockwell Automation CompactLogix 5480

Default version status: unaffected

  • v.32.011affected

Rockwell Automation ControlLogix® 5580

Default version status: unaffected

  • v.32.011affected

Rockwell Automation ControlLogix® 5580 Process

Default version status: unaffected

  • v.33.011affected

Rockwell Automation GuardLogix 5580

Default version status: unaffected

  • v.32.011affected

Rockwell Automation 1756-EN4

Default version status: unaffected

  • v2.001affected

References