Description (CNA)
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / ControlLogix® 5580 | affected V28.011 |
| Rockwell Automation / ControlLogix® 5580 Process | affected V33.011 |
| Rockwell Automation / GuardLogix 5580 | affected V31.011 |
| Rockwell Automation / CompactLogix 5380 | affected V28.011 |
| Rockwell Automation / Compact GuardLogix 5380 SIL 2 | affected V31.011 |
| Rockwell Automation / Compact GuardLogix 5380 SIL 3 | affected V32.013 |
| Rockwell Automation / CompactLogix 5480 | affected V32.011 |
| Rockwell Automation / FactoryTalk® Logix Echo | affected V33.011 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.
No references supplied.