Rockwell Automation ControlLogix and GuardLogix (Update A)
Successful exploitation of this vulnerability could allow an attacker to cause a major nonrecoverable fault (MNRF) resulting in the product to become unavailable.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-3493US | high7.5 | — | ||
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-107-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-107-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (16)
- Mitigation1756-EN4TR
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationCompact GuardLogix 5380
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationCompactLogix 5380
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationCompactLogix 5380 Process
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationCompactLogix 5480
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationControlLogix 5580
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationControlLogix 5580 Process
Rockwell Automation has released product updates addressing this vulnerability:
- MitigationGuardLogix 5580
Rockwell Automation has released product updates addressing this vulnerability:
- Behoben1756-EN4TR
1756-EN4TR: Update to version V6.001
- BehobenCompact GuardLogix 5380
Compact GuardLogix 5380: Update to version V35.013, V36.011 and later
- BehobenCompactLogix 5380
CompactLogix 5380 Process: Update to version V35.013, V36.011 and later
- BehobenCompactLogix 5380 Process
CompactLogix 5380 Process: Update to version V35.013, V36.011 and later
- BehobenCompactLogix 5480
CompactLogix 5480: Update to version V35.013, V36.011 and later
- BehobenControlLogix 5580
ControlLogix 5580 Process: Update to version V35.013, V36.011 and later
- BehobenControlLogix 5580 Process
ControlLogix 5580 Process: Update to version V35.013, V36.011 and later
- BehobenGuardLogix 5580
GuardLogix 5580: Update to version V35.013 or V36.011
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan