{"id":"CVE-2024-6207","state":"PUBLISHED","title":"CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited","description":"CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.","publishedAt":"2024-10-14T20:53:49.191Z","updatedAt":"2024-10-15T14:43:19.768Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"Rockwell"},"assigner":"Rockwell","products":["Rockwell Automation ControlLogix® 5580","Rockwell Automation ControlLogix® 5580 Process","Rockwell Automation GuardLogix 5580","Rockwell Automation CompactLogix 5380","Rockwell Automation Compact GuardLogix 5380 SIL 2","Rockwell Automation Compact GuardLogix 5380 SIL 3","Rockwell Automation CompactLogix 5480","Rockwell Automation FactoryTalk® Logix Echo"],"affected":[{"vendor":"Rockwell Automation","product":"ControlLogix® 5580","defaultStatus":"unaffected","versions":[{"version":"V28.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"ControlLogix® 5580 Process","defaultStatus":"unaffected","versions":[{"version":"V33.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"GuardLogix 5580","defaultStatus":"unaffected","versions":[{"version":"V31.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"CompactLogix 5380","defaultStatus":"unaffected","versions":[{"version":"V28.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"Compact GuardLogix 5380 SIL 2","defaultStatus":"unaffected","versions":[{"version":"V31.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"Compact GuardLogix 5380 SIL 3","defaultStatus":"unaffected","versions":[{"version":"V32.013","status":"affected"}]},{"vendor":"Rockwell Automation","product":"CompactLogix 5480","defaultStatus":"unaffected","versions":[{"version":"V32.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"FactoryTalk® Logix Echo","defaultStatus":"unaffected","versions":[{"version":"V33.011","status":"affected"}]}],"references":["https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/6xxx/CVE-2024-6207.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-6207","state":"PUBLISHED","datePublished":"2024-10-14T20:53:49.191Z","dateUpdated":"2024-10-15T14:43:19.768Z","assignerShortName":"Rockwell","assignerOrgId":"b73dd486-f505-4403-b634-40b078b177f0","dateReserved":"2024-06-20T16:08:17.052Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running."}],"affected":[{"vendor":"Rockwell Automation","product":"ControlLogix® 5580","defaultStatus":"unaffected","versions":[{"version":"V28.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"ControlLogix® 5580 Process","defaultStatus":"unaffected","versions":[{"version":"V33.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"GuardLogix 5580","defaultStatus":"unaffected","versions":[{"version":"V31.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"CompactLogix 5380","defaultStatus":"unaffected","versions":[{"version":"V28.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"Compact GuardLogix 5380 SIL 2","defaultStatus":"unaffected","versions":[{"version":"V31.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"Compact GuardLogix 5380 SIL 3","defaultStatus":"unaffected","versions":[{"version":"V32.013","status":"affected"}]},{"vendor":"Rockwell Automation","product":"CompactLogix 5480","defaultStatus":"unaffected","versions":[{"version":"V32.011","status":"affected"}]},{"vendor":"Rockwell Automation","product":"FactoryTalk® Logix Echo","defaultStatus":"unaffected","versions":[{"version":"V33.011","status":"affected"}]}],"references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Rockwell","orgId":"b73dd486-f505-4403-b634-40b078b177f0","dateUpdated":"2024-10-14T20:53:49.191Z"},"datePublic":"2024-10-10T13:00:00.000Z","impacts":[{"capecId":"CAPEC-100","descriptions":[{"lang":"en","value":"CAPEC-100 Overflow Buffers"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

AFFECTED PRODUCTS AND SOLUTION

Affected Product
First Known in firmware revisionCorrected in firmware revision
ControlLogix® 5580V28.011V33.017, V34.014, V35.013, V36.011 and later
ControlLogix® 5580 ProcessV33.011V33.017, V34.014, V35.013, V36.011 and later
GuardLogix 5580V31.011 V33.017, V34.014, V35.013, V36.011 and later
CompactLogix 5380V28.011 V33.017, V34.014, V35.013, V36.011 and later
Compact GuardLogix 5380 SIL 2V31.011V33.017, V34.014, V35.013, V36.011 and later
Compact GuardLogix 5380 SIL 3V32.013V33.017, V34.014, V35.013, V36.011 and later
CompactLogix 5480V32.011V33.017, V34.014, V35.013, V36.011 and later
FactoryTalk® Logix Echo V33.011V34.014, V35.013, V36.011 and later
\n\n
"}],"value":"AFFECTED PRODUCTS AND SOLUTION\n\nAffected Product\nFirst Known in firmware revisionCorrected in firmware revisionControlLogix® 5580V28.011V33.017, V34.014, V35.013, V36.011 and laterControlLogix® 5580 ProcessV33.011V33.017, V34.014, V35.013, V36.011 and laterGuardLogix 5580V31.011 V33.017, V34.014, V35.013, V36.011 and laterCompactLogix 5380V28.011 V33.017, V34.014, V35.013, V36.011 and laterCompact GuardLogix 5380 SIL 2V31.011V33.017, V34.014, V35.013, V36.011 and laterCompact GuardLogix 5380 SIL 3V32.013V33.017, V34.014, V35.013, V36.011 and laterCompactLogix 5480V32.011V33.017, V34.014, V35.013, V36.011 and laterFactoryTalk® Logix Echo V33.011V34.014, V35.013, V36.011 and later"}],"source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"rockwellautomation","product":"compactlogix_5380_firmware","defaultStatus":"unaffected","versions":[{"version":"28.011","status":"affected","lessThan":"33.017","versionType":"custom"},{"version":"34.0","status":"affected","lessThan":"34.014","versionType":"custom"},{"version":"35.0","status":"affected","lessThan":"35.013","versionType":"custom"},{"version":"36.0","status":"affected","lessThan":"36.011","versionType":"custom"}],"cpes":["cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:*:*:*:*:*:*:*:*"]},{"vendor":"rockwellautomation","product":"controllogix_5580_process_firmware","defaultStatus":"unaffected","versions":[{"version":"33.011","status":"affected","lessThan":"33.017","versionType":"custom"},{"version":"34.0","status":"affected","lessThan":"34.014","versionType":"custom"},{"version":"35.0","status":"affected","lessThan":"35.013","versionType":"custom"},{"version":"36.0","status":"affected","lessThan":"36.011","versionType":"custom"}],"cpes":["cpe:2.3:o:rockwellautomation:controllogix_5580_process_firmware:*:*:*:*:*:*:*:*"]},{"vendor":"rockwellautomation","product":"guardlogix_5580_firmware","defaultStatus":"unaffected","versions":[{"version":"31.011","status":"affected","lessThan":"33.017","versionType":"custom"},{"version":"34.0","status":"affected","lessThan":"34.014","versionType":"custom"},{"version":"35.0","status":"affected","lessThan":"35.013","versionType":"custom"},{"version":"36.0","status":"affected","lessThan":"36.011","versionType":"custom"}],"cpes":["cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil2_firmware:*:*:*:*:*:*:*:*","cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:*:*:*:*:*:*:*:*"]},{"vendor":"rockwellautomation","product":"controllogix_5580_process_firmware","defaultStatus":"unaffected","versions":[{"version":"32.011","status":"affected","lessThan":"33.017","versionType":"custom"},{"version":"34.0","status":"affected","lessThan":"34.014","versionType":"custom"},{"version":"35.0","status":"affected","lessThan":"35.013","versionType":"custom"},{"version":"36.0","status":"affected","lessThan":"36.011","versionType":"custom"}],"cpes":["cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:*:*:*:*:*:*:*:*"]},{"vendor":"rockwellautomation","product":"compact_guardlogix_5380_sil3_firmware","defaultStatus":"unaffected","versions":[{"version":"32.013","status":"affected","lessThan":"33.017","versionType":"custom"},{"version":"34.0","status":"affected","lessThan":"34.014","versionType":"custom"},{"version":"35.0","status":"affected","lessThan":"35.013","versionType":"custom"},{"version":"36.0","status":"affected","lessThan":"36.011","versionType":"custom"}],"cpes":["cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil3_firmware:*:*:*:*:*:*:*:*"]},{"vendor":"rockwellautomation","product":"factorytalk_logix_echo","defaultStatus":"unaffected","versions":[{"version":"33.011","status":"affected","lessThan":"34.014","versionType":"custom"},{"version":"35.0","status":"affected","lessThan":"35.013","versionType":"custom"},{"version":"36.0","status":"affected","lessThan":"36.011","versionType":"custom"}],"cpes":["cpe:2.3:a:rockwellautomation:factorytalk_logix_echo:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-15T14:11:41.281080Z","id":"CVE-2024-6207","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-15T14:43:19.768Z"}}]}}}