Summary
Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation CompactLogix und Rockwell Automation ControlLogix ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.
Product
Rockwell Automation CompactLogix ist eine Familie von speicherprogrammierbaren Steuerungen (SPS) für Automatisierungsanwendungen.
ControlLogix bezeichnet eine Produktfamilie von Steuerungssystemen für Industrieanlagen.
Vulnerabilities 4
-
Critical 9.2
CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverabl…
-
Critical 9.2
CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow
A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault (MNRF).
-
Critical 9.2
CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow
A denial-of-service issue exists in 5380/5480/5580 controllers. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).
-
High 8.2
Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability
A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue stems from the controller failing to properly reject certificates signed by an int…
Revision history
-
#2
Rockwell Referenz SD1781 ergänzt
-
#1
Initiale Fassung
References
-
Rockwell Automation Security Advisory SD1781 vom 2026-07-14
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1781.html
-
Rockwell Automation Security Advisory SD1781 vom 2026-07-14
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1788.html
-
EUVD Security Advisory vom 2026-07-14
https://euvd.enisa.europa.eu/enisa/EUVD-2025-210463
-
EUVD Security Advisory vom 2026-07-14
https://euvd.enisa.europa.eu/enisa/EUVD-2026-43709