Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-6207

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation ControlLogix® 5580

Default version status: unaffected

  • V28.011affected

Rockwell Automation ControlLogix® 5580 Process

Default version status: unaffected

  • V33.011affected

Rockwell Automation GuardLogix 5580

Default version status: unaffected

  • V31.011affected

Rockwell Automation CompactLogix 5380

Default version status: unaffected

  • V28.011affected

Rockwell Automation Compact GuardLogix 5380 SIL 2

Default version status: unaffected

  • V31.011affected

Rockwell Automation Compact GuardLogix 5380 SIL 3

Default version status: unaffected

  • V32.013affected

Rockwell Automation CompactLogix 5480

Default version status: unaffected

  • V32.011affected

Rockwell Automation FactoryTalk® Logix Echo

Default version status: unaffected

  • V33.011affected

References