CVE-2024-3493 — Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value

Description (CNA)

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / ControlLogix 5580	affected v35.011
Rockwell Automation / GuardLogix 5580	affected v35.011
Rockwell Automation / CompactLogix 5380	affected v5.001
Rockwell Automation / 1756-EN4TR	affected v5.001

CWE

CWE-20

References

https://www.rockwellautomation.com/en-us/support/advisory.SD1666.html

ADP enrichment

CVE

No English description supplied.

https://www.rockwellautomation.com/en-us/support/advisory.SD1666.html

CISA-ADP

No English description supplied.

No references supplied.