Description
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | ControlLogix® 5580 | 34.011 | — |
| Rockwell Automation | GuardLogix 5580 | 34.011 | — |
| Rockwell Automation | 1756-EN4 | 4.001 | — |
| Rockwell Automation | CompactLogix 5380 | 34.011 | — |
| Rockwell Automation | Compact GuardLogix 5380 | 34.011 | — |
| Rockwell Automation | CompactLogix 5480 | 34.011 | — |
Advisories 2
- WID-SEC-2024-1349 Rockwell Automation ControlLogix: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jun 11, 2024
- ICSA-24-163-01 Rockwell Automation ControlLogix, GuardLogix, and CompactLogix CISA ICS & IT advisories · Jun 11, 2024