ICSA-24-030-05

icsaUScisa_csaf_ot

Rockwell Automation ControlLogix and GuardLogix

view advisory published 2024-01-30

Successful exploitation of this vulnerability could allow an attacker to crash the device by exploiting a Denial-of-Service (DoS) vulnerability.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-21916UShigh7.5—
A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major no…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationControlLogix 5570

    Rockwell Automation users with the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages users to implement their suggested security best practices to minimize the risk of vulnerability.

  • MitigationControlLogix 5570 redundant

    Rockwell Automation users with the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages users to implement their suggested security best practices to minimize the risk of vulnerability.

  • MitigationGuardLogix 5570

    Rockwell Automation users with the affected software are encouraged to apply the risk mitigations, if possible. Additionally, Rockwell Automation encourages users to implement their suggested security best practices to minimize the risk of vulnerability.

  • FixedControlLogix 5570

    ControlLogix 5570: Corrected in v33.016, 34.013, 35.012, 36.011 and later

  • FixedControlLogix 5570 redundant

    ControlLogix 5570 redundant: Corrected in v33.053_kit1, 34.052_kit1, 35.052_kit1, 36.051_kit1 and later

  • FixedGuardLogix 5570

    GuardLogix 5570: Corrected in v33.016, 34.013, 35.012, 36.011 and later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan