Rockwell Automation GuardLogix 5380 and 5580 (Update A)
view advisory published 2025-02-04
Successful exploitation of this vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service condition.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-24478US | — | — | ||
A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonre… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-035-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-035-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationCompact GuardLogix 5380 SIL 3
Restrict access to the task object via CIP Security and Hard Run.
- MitigationGuardLogix 5580 (SIL 3 with the safety partner 3)
Restrict access to the task object via CIP Security and Hard Run.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan