Skip to content
OpenAdvisories
High · 8.3 CVE-2024-5659 EUVD-2024-46834GHSA-949p-hqw3-rgm2

Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers

Published Jun 14, 2024 · Updated Aug 1, 2024 · Assigned by Rockwell

Description

Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.

Affected products

VendorProductAffectedFixed
Rockwell Automation ControlLogix® 5580 34.011 —
Rockwell Automation GuardLogix 5580 34.011 —
Rockwell Automation 1756-EN4 4.001 —
Rockwell Automation CompactLogix 5380 34.011 —
Rockwell Automation Compact GuardLogix 5380 34.011 —
Rockwell Automation CompactLogix 5480 34.011 —

Advisories 2

References