Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-7507

Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation CompactLogix 5380 (5069 – L3z)

Default version status: unaffected

  • 28.011affected

Rockwell Automation ControlLogix® 5580 (1756 –L8z)

Default version status: unaffected

  • 28.011affected

Rockwell Automation GuardLogix 5580 (1756-L8z)

Default version status: unaffected

  • 28.011affected

Rockwell Automation Compact GuardLogix 5380 (5069- L3zS2)

Default version status: unaffected

  • 28.011affected

Rockwell Automation CompactLogix 5480 (5069-L4)

Default version status: unaffected

  • 28.011affected

References