Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380
Successful exploitation of this vulnerability may cause the device to become unavailable and require a factory reset to recover.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-6077US | high7.5 | — | ||
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device wi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-256-18 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-256-18 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (18)
- Mitigation1756-EN4
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompact GuardLogix 5380 SIL 2
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompact GuardLogix 5380 SIL 3
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompactLogix 5380
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompactLogix 5380 Process
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationCompactLogix 5480
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationControlLogix 5580
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationControlLogix 5580 Process
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- MitigationGuardLogix 5580
Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions above, to apply the risk mitigation below:
- Behoben1756-EN4
1756-EN4: v6.001 and later
- BehobenCompact GuardLogix 5380 SIL 2
Compact GuardLogix 5380 SIL 2: v33.017, v34.014, v35.013, v36.011 and later
- BehobenCompact GuardLogix 5380 SIL 3
Compact GuardLogix 5380 SIL 3: v33.017, v34.014, v35.013, v36.011 and later
- BehobenCompactLogix 5380
CompactLogix 5380 Process: v33.017, v34.014, v35.013, v36.011 and later
- BehobenCompactLogix 5380 Process
CompactLogix 5380 Process: v33.017, v34.014, v35.013, v36.011 and later
- BehobenCompactLogix 5480
CompactLogix 5480: v33.017, v34.014, v35.013, v36.011 and later
- BehobenControlLogix 5580
ControlLogix 5580 Process: v33.017, v34.014, v35.013, v36.011 and later
- BehobenControlLogix 5580 Process
ControlLogix 5580 Process: v33.017, v34.014, v35.013, v36.011 and later
- BehobenGuardLogix 5580
GuardLogix 5580: v33.017, v34.014, v35.013, v36.011 and later
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan