Description
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | CompactLogix 5380 controllers | v33.011 < | — |
| Rockwell Automation | Compact GuardLogix® 5380 controllers | v33.011< | — |
| Rockwell Automation | CompactLogix 5480 controllers | v33.011< | — |
| Rockwell Automation | GuardLogix 5580 controllers | v33.011< | — |
| Rockwell Automation | 1756-EN4TR | v3.002 | — |
Advisories 2
- WID-SEC-2024-3115 Rockwell Automation ControlLogix: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Dec 1, 2024
- ICSA-24-284-18 Rockwell Automation Logix Controllers CISA ICS & IT advisories · Oct 10, 2024