ICSA-26-244-05

icsaUScisa_csaf_ot

Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix

view advisory published 2026-09-01

CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-42260UShigh7.5Exploit
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

  • MitigationCompact GuardLogix 5380

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationCompactLogix 5380

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationCompactLogix 5480

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationControlLogix 5580

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • MitigationGuardLogix 5580

    Customers using the affected software who are not able to upgrade to one of the corrected versions should use Rockwell Automation's security best practices.

  • FixedCompact GuardLogix 5380

    Rockwell Automation recommends users update to firmware version 34.015 and later.

  • FixedCompactLogix 5380

    Rockwell Automation recommends users update to firmware version 34.015 and later.

  • FixedCompactLogix 5480

    Rockwell Automation recommends users update to firmware version 34.015 and later.

  • FixedControlLogix 5580

    Rockwell Automation recommends users update to firmware version 34.015 and later.

  • FixedGuardLogix 5580

    Rockwell Automation recommends users update to firmware version 34.015 and later.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan