Skip to content
OpenAdvisories
High · 7.5 CVE-2024-6207 EUVD-2024-47344GHSA-gq7m-h265-px53

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted…

Published Oct 14, 2024 · Updated Oct 15, 2024 · Assigned by Rockwell

Description

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.

Affected products

VendorProductAffectedFixed
Rockwell Automation ControlLogix® 5580 V28.011 —
Rockwell Automation ControlLogix® 5580 Process V33.011 —
Rockwell Automation GuardLogix 5580 V31.011 —
Rockwell Automation CompactLogix 5380 V28.011 —
Rockwell Automation Compact GuardLogix 5380 SIL 2 V31.011 —
Rockwell Automation Compact GuardLogix 5380 SIL 3 V32.013 —
Rockwell Automation CompactLogix 5480 V32.011 —
Rockwell Automation FactoryTalk® Logix Echo V33.011 —

Advisories 2

References