CVE-2024-6077 — Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerabi…

Description (CNA)

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / CompactLogix 5380	affected v.32 .011
Rockwell Automation / CompactLogix 5380 Process	affected v.33.011
Rockwell Automation / Compact GuardLogix 5380 SIL 2	affected v.32.013
Rockwell Automation / Compact GuardLogix 5380 SIL 3	affected v.32.011
Rockwell Automation / CompactLogix 5480	affected v.32.011
Rockwell Automation / ControlLogix® 5580	affected v.32.011
Rockwell Automation / ControlLogix® 5580 Process	affected v.33.011
Rockwell Automation / GuardLogix 5580	affected v.32.011
Rockwell Automation / 1756-EN4	affected v2.001

CWE

CWE-20

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1963.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.