Description
A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | ControlLogix® 5580 (1756-L8z) | V28 | — |
| Rockwell Automation | GuardLogix® 5580 (1756-L8zS) | V31 | — |
| Rockwell Automation | 1756-EN4TR | V2 | — |
| Rockwell Automation | 1756-EN2T | v5.007(unsigned)/v5.027(signed), 1756-EN2T/D: V10.006 | — |
| Rockwell Automation | 1756-EN2F | v5.007(unsigned)/v5.027(signed), 1756-EN2F/C: V10.009 | — |
| Rockwell Automation | 1756-EN2TR | v5.007(unsigned)/v5.027(signed), 1756-EN2TR/C: V10.007 | — |
| Rockwell Automation | 1756-EN3TR | v5.007(unsigned)/v5.027(signed), 1756-EN3TR/B: V10.007 | — |
| Rockwell Automation | 1756-EN2TP | 1756-EN2TP/A: V10.020 | — |
Advisories 2
- WID-SEC-2024-1747 Rockwell Automation ControlLogix: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Aug 1, 2024
- ICSA-24-214-09 Rockwell Automation Logix Controllers CISA ICS & IT advisories · Aug 1, 2024