Description
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | CompactLogix 5380 | v.32 .011 | — |
| Rockwell Automation | CompactLogix 5380 Process | v.33.011 | — |
| Rockwell Automation | Compact GuardLogix 5380 SIL 2 | v.32.013 | — |
| Rockwell Automation | Compact GuardLogix 5380 SIL 3 | v.32.011 | — |
| Rockwell Automation | CompactLogix 5480 | v.32.011 | — |
| Rockwell Automation | ControlLogix® 5580 | v.32.011 | — |
| Rockwell Automation | ControlLogix® 5580 Process | v.33.011 | — |
| Rockwell Automation | GuardLogix 5580 | v.32.011 | — |
| Rockwell Automation | 1756-EN4 | v2.001 | — |
Advisories 2
- WID-SEC-2024-2138 Rockwell Automation ControlLogix: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 12, 2024
- ICSA-24-256-18 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380 CISA ICS & IT advisories · Sep 12, 2024