Skip to content
OpenAdvisories
High · 8.7 CVE-2024-8626 EUVD-2024-49305GHSA-mf2q-g3w5-qq7r

Logix Controllers Vulnerable to Denial-of-Service Vulnerability

Published Oct 8, 2024 · Updated Oct 8, 2024 · Assigned by Rockwell

Description

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

Affected products

VendorProductAffectedFixed
Rockwell Automation CompactLogix 5380 controllers v33.011 < —
Rockwell Automation Compact GuardLogix® 5380 controllers v33.011< —
Rockwell Automation CompactLogix 5480 controllers v33.011< —
Rockwell Automation GuardLogix 5580 controllers v33.011< —
Rockwell Automation 1756-EN4TR v3.002 —

Advisories 2

References