Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Rockwell Automation CompactLogix 5370 und ControlLogix 5570 Controllers ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.
Product
Rockwell Automation CompactLogix ist eine Familie von speicherprogrammierbaren Steuerungen (SPS) für Automatisierungsanwendungen.
ControlLogix bezeichnet eine Produktfamilie von Steuerungssystemen für Industrieanlagen.
Vulnerabilities 3
-
High 8.7
Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denia…
-
High 8.7
Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP
A denial of service security issue exists in the affected product. The security issue stems from a fault occurring when a crafted CIP message is sent. Devices with less memory are more likely to be affected. This can result in a major nonrecoverable fault (MN…
-
Medium 6.3
Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This inf…
Revision history
-
#1
Initiale Fassung
References
-
Rockwell Automation Security Advisory SD1776 vom 2026-06-16
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1776.html
-
Rockwell Automation Security Advisory SD1772 vom 2026-06-16
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1772.html