Skip to content
OpenAdvisories
High · 8.7 CVE-2024-40619 EUVD-2024-38545GHSA-89fm-3w27-7c7q

Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling

Published Aug 14, 2024 · Updated Aug 19, 2024 · Assigned by Rockwell

Description

CVE-2024-40619 IMPACT

A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.

Affected products

VendorProductAffectedFixed
Rockwell Automation ControlLogix® 5580 34.011 —
Rockwell Automation GuardLogix 5580 34.011 —

Advisories 2

References