Rockwell Automation RSLogix 5 and RSLogix 500

Summary

Vulnerabilities 1

• High 7.7
  CVE-2024-7847

  RSLogix™ 5 and RSLogix 500® Remote Code Execution Via VBA Embedded Script

  VULNERABILITY DETAILS Rockwell Automation used the latest versions of the CVSS scoring system to assess the following vulnerabilities. The following vulnerabilities were reported to us by Sharon Brizinov of Claroty Research - Team82. A feature in the affected…

  Rockwell Automation RSLogix 500® RSLogix™ 5 RSLogix™ Micro Developer and Starter ICS / OT
  Oct 14, 2024

Revision history

1. 2024-09-19 #1

   Initial Publication

References

• ICSA Advisory ICSA-24-263-01 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-263-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B