Skip to content
7.3 High

CVE-2024-6242 A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot…

Description

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.

Affected products and versions

Product Affected versions Fixed in
ControlLogix® 5580 (1756-L8z) 28 No fix stated
GuardLogix® 5580 (1756-L8zS) 31 No fix stated
1756-EN4TR 2 No fix stated
1756-EN2T Versions not published
1756-EN2F Versions not published
1756-EN2TR Versions not published
1756-EN3TR Versions not published
1756-EN2TP Versions not published
Track this CVE