Rockwell Automation ControlLogix and GuardLogix (Update A)
Successful exploitation of this vulnerability could allow an attacker to cause a major nonrecoverable fault (MNRF) resulting in the product to become unavailable.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-3493US | high7.5 | — | ||
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-107-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-107-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (16)
- Mitigation1756-EN4TR
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationCompact GuardLogix 5380
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationCompactLogix 5380
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationCompactLogix 5380 Process
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationCompactLogix 5480
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationControlLogix 5580
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationControlLogix 5580 Process
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationGuardLogix 5580
Rockwell Automation has released product updates addressing this vulnerability:
- Fixed1756-EN4TR
1756-EN4TR: Update to version V6.001
- FixedCompact GuardLogix 5380
Compact GuardLogix 5380: Update to version V35.013, V36.011 and later
- FixedCompactLogix 5380
CompactLogix 5380 Process: Update to version V35.013, V36.011 and later
- FixedCompactLogix 5380 Process
CompactLogix 5380 Process: Update to version V35.013, V36.011 and later
- FixedCompactLogix 5480
CompactLogix 5480: Update to version V35.013, V36.011 and later
- FixedControlLogix 5580
ControlLogix 5580 Process: Update to version V35.013, V36.011 and later
- FixedControlLogix 5580 Process
ControlLogix 5580 Process: Update to version V35.013, V36.011 and later
- FixedGuardLogix 5580
GuardLogix 5580: Update to version V35.013 or V36.011
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan