Description (CNA)
A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rockwell Automation / ControlLogix® 5580 (1756-L8z) | affected V28 |
| Rockwell Automation / GuardLogix® 5580 (1756-L8zS) | affected V31 |
| Rockwell Automation / 1756-EN4TR | affected V2 |
| Rockwell Automation / 1756-EN2T | affected v5.007(unsigned)/v5.027(signed) |
| Rockwell Automation / 1756-EN2F | affected v5.007(unsigned)/v5.027(signed) |
| Rockwell Automation / 1756-EN2TR | affected v5.007(unsigned)/v5.027(signed) |
| Rockwell Automation / 1756-EN3TR | affected v5.007(unsigned)/v5.027(signed) |
| Rockwell Automation / 1756-EN2T | affected 1756-EN2T/D: V10.006 |
| Rockwell Automation / 1756-EN2F | affected 1756-EN2F/C: V10.009 |
| Rockwell Automation / 1756-EN2TR | affected 1756-EN2TR/C: V10.007 |
| Rockwell Automation / 1756-EN3TR | affected 1756-EN3TR/B: V10.007 |
| Rockwell Automation / 1756-EN2TP | affected 1756-EN2TP/A: V10.020 |
CWE
CWE-420
References
ADP enrichment
No English description supplied.
No references supplied.