ICSA-24-163-01

icsaUScisa_csaf_ot

Rockwell Automation ControlLogix, GuardLogix, and CompactLogix

Advisory ansehen veröffentlicht 2024-06-11

Successful exploitation of this vulnerability could compromise the availability of the device.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-5659USmedium6.5—
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerab…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

  • Mitigation1756-EN4

    Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.

  • MitigationCompact GuardLogix 5380

    Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.

  • MitigationCompactLogix 5380

    Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.

  • MitigationCompactLogix 5480

    Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.

  • MitigationControlLogix 5580

    Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.

  • MitigationGuardLogix 5580

    Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.

  • Behoben1756-EN4

    1756-EN4: corrected in V6.001 and later

  • BehobenCompact GuardLogix 5380

    Compact GuardLogix 5380: corrected in V34.014, V35.013, V36.011 and later

  • BehobenCompactLogix 5380

    CompactLogix 5380: corrected in V34.014, V35.013, V36.011 and later

  • BehobenCompactLogix 5480

    CompactLogix 5480: corrected in V34.014, V35.013, V36.011 and later

  • BehobenControlLogix 5580

    ControlLogix 5580: corrected in V34.014, V35.013, V36.011 and later

  • BehobenGuardLogix 5580

    GuardLogix 5580: corrected in V34.014, V35.013, V36.011 and later

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan