8.3
High
CVE-2024-5659 Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result…
Description
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ControlLogix® 5580 | 34.011 | No fix stated |
| GuardLogix 5580 | 34.011 | No fix stated |
| 1756-EN4 | 4.001 | No fix stated |
| CompactLogix 5380 | 34.011 | No fix stated |
| Compact GuardLogix 5380 | 34.011 | No fix stated |
| CompactLogix 5480 | 34.011 | No fix stated |
| controllogix_5580 | 34.011 | No fix stated |
| guardlogix_5580 | 34.011 | No fix stated |
| 1756_en4 | 4.001 | No fix stated |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| compact_logix_5480 | 34.011 | No fix stated |
| compact_guardlogix_5480 | 34.011 | No fix stated |
| compactlogix | 5480 | No fix stated |
Other CVEs of ControlLogix® 5580
The 5 CVEs of ControlLogix® 5580 →
CVE-2025-9166
A denial-of-service security issue exists in the affected product and version
8.2
High
CVE-2024-6207
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and…
8.7
High
CVE-2024-6077
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are…
8.7
High
CVE-2024-40619
CVE-2024-40619 IMPACT
A denial-of-service vulnerability exists in the affected products
8.7
High