Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-7515

Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation

Description

CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation CompactLogix 5380 (5069-L3z)

Default version status: unaffected

  • 28.011affected

Rockwell Automation ControlLogix® 5580 (1756- L8z)

Default version status: unaffected

  • 28.011affected

Rockwell Automation GuardLogix 5580 (1756- L8zS)

Default version status: unaffected

  • 28.011affected

Rockwell Automation Compact GuardLogix 5380 (5069 – L3zS2)

Default version status: unaffected

  • 28.011affected

Rockwell Automation CompactLogix 5480 (5069-L4)

Default version status: unaffected

  • 28.011affected

References