Skip to content
OpenAdvisories
High · 7.3 CVE-2024-6242 EUVD-2024-47370GHSA-6h2q-3m5q-wv4c

Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices

Published Aug 1, 2024 · Updated Sep 25, 2025 · Assigned by Rockwell

Description

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.

Affected products

VendorProductAffectedFixed
Rockwell Automation ControlLogix® 5580 (1756-L8z) V28 —
Rockwell Automation GuardLogix® 5580 (1756-L8zS) V31 —
Rockwell Automation 1756-EN4TR V2 —
Rockwell Automation 1756-EN2T v5.007(unsigned)/v5.027(signed), 1756-EN2T/D: V10.006 —
Rockwell Automation 1756-EN2F v5.007(unsigned)/v5.027(signed), 1756-EN2F/C: V10.009 —
Rockwell Automation 1756-EN2TR v5.007(unsigned)/v5.027(signed), 1756-EN2TR/C: V10.007 —
Rockwell Automation 1756-EN3TR v5.007(unsigned)/v5.027(signed), 1756-EN3TR/B: V10.007 —
Rockwell Automation 1756-EN2TP 1756-EN2TP/A: V10.020 —

Advisories 2

References