Skip to content
OpenAdvisories
High ICSA-24-107-03 1 CVE

Rockwell Automation ControlLogix and GuardLogix (Update A)

Published Apr 16, 2024 · Updated May 9, 2024 · Revision 2

Vendor: Rockwell Automation Product: 1756-EN4TR Product: Compact GuardLogix 5380 Product: CompactLogix 5380 Product: CompactLogix 5380 Process Product: CompactLogix® 5480 Product: ControlLogix® 5580 Product: ControlLogix® 5580 Process Product: GuardLogix 5580

Summary

Successful exploitation of this vulnerability could allow an attacker to cause a major nonrecoverable fault (MNRF) resulting in the product to become unavailable.

Vulnerabilities 1

  • High 8.6
    CVE-2024-3493

    Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value

    A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 53…

    Rockwell Automation ControlLogix® 5580 GuardLogix 5580 CompactLogix 5380 ICS / OT

Revision history

  1. #2

    Update A - Update to the affected products and mitigations

  2. #1

    Initial Publication

References