ICSA-24-284-20

icsaUScisa_csaf_ot

Rockwell Automation ControlLogix

view advisory published 2024-10-10

Successful exploitation of this vulnerability could allow an attacker to send a specially crafted CIP message and cause a denial-of-service condition on the affected device.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-6207UShigh7.5—
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • MitigationCompact GuardLogix 5380 SIL 2

    Rockwell Automations recommends users update to V33.017, V34.014, V35.013, or V36.011.

  • MitigationCompact GuardLogix 5380 SIL 3

    Rockwell Automations recommends users update to V33.017, V34.014, V35.013, or V36.011.

  • MitigationCompactLogix 5380

    Rockwell Automations recommends users update to V33.017, V34.014, V35.013, or V36.011.

  • MitigationCompactLogix 5480

    Rockwell Automations recommends users update to V33.017, V34.014, V35.013, or V36.011.

  • MitigationControlLogix 5580

    Rockwell Automations recommends users update to V33.017, V34.014, V35.013, or V36.011.

  • MitigationControlLogix 5580 Process

    Rockwell Automations recommends users update to V33.017, V34.014, V35.013, or V36.011.

  • MitigationFactoryTalk Logix Echo

    Rockwell Automations recommends users update to V33.017, V34.014, V35.013, or V36.011.

  • MitigationGuardLogix 5580

    Rockwell Automations recommends users update to V33.017, V34.014, V35.013, or V36.011.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan