Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380
Successful exploitation of this vulnerability may cause the device to become unavailable and require a factory reset to recover.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6077US | high7.5 | — | ||
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device wi… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-256-18 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-256-18 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (18)
- Mitigation1756-EN4
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompact GuardLogix 5380 SIL 2
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompact GuardLogix 5380 SIL 3
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompactLogix 5380
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompactLogix 5380 Process
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompactLogix 5480
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationControlLogix 5580
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationControlLogix 5580 Process
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationGuardLogix 5580
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- Fixed1756-EN4
1756-EN4: v6.001 and later
- FixedCompact GuardLogix 5380 SIL 2
Compact GuardLogix 5380 SIL 2: v33.017, v34.014, v35.013, v36.011 and later
- FixedCompact GuardLogix 5380 SIL 3
Compact GuardLogix 5380 SIL 3: v33.017, v34.014, v35.013, v36.011 and later
- FixedCompactLogix 5380
CompactLogix 5380 Process: v33.017, v34.014, v35.013, v36.011 and later
- FixedCompactLogix 5380 Process
CompactLogix 5380 Process: v33.017, v34.014, v35.013, v36.011 and later
- FixedCompactLogix 5480
CompactLogix 5480: v33.017, v34.014, v35.013, v36.011 and later
- FixedControlLogix 5580
ControlLogix 5580 Process: v33.017, v34.014, v35.013, v36.011 and later
- FixedControlLogix 5580 Process
ControlLogix 5580 Process: v33.017, v34.014, v35.013, v36.011 and later
- FixedGuardLogix 5580
GuardLogix 5580: v33.017, v34.014, v35.013, v36.011 and later
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan