Rockwell Automation ControlLogix, GuardLogix, and CompactLogix
Successful exploitation of this vulnerability could compromise the availability of the device.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-5659US | medium6.5 | — | ||
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerab… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-163-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-163-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- Mitigation1756-EN4
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.
- MitigationCompact GuardLogix 5380
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.
- MitigationCompactLogix 5380
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.
- MitigationCompactLogix 5480
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.
- MitigationControlLogix 5580
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.
- MitigationGuardLogix 5580
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.
- Fixed1756-EN4
1756-EN4: corrected in V6.001 and later
- FixedCompact GuardLogix 5380
Compact GuardLogix 5380: corrected in V34.014, V35.013, V36.011 and later
- FixedCompactLogix 5380
CompactLogix 5380: corrected in V34.014, V35.013, V36.011 and later
- FixedCompactLogix 5480
CompactLogix 5480: corrected in V34.014, V35.013, V36.011 and later
- FixedControlLogix 5580
ControlLogix 5580: corrected in V34.014, V35.013, V36.011 and later
- FixedGuardLogix 5580
GuardLogix 5580: corrected in V34.014, V35.013, V36.011 and later
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan