Skip to content
Sign in
8.7 High

CVE-2024-6077 A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are…

Description

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.

Affected products and versions

Product Affected versions Fixed in
CompactLogix 5380 Versions not published
CompactLogix 5380 Process Versions not published
Compact GuardLogix 5380 SIL 2 Versions not published
Compact GuardLogix 5380 SIL 3 Versions not published
CompactLogix 5480 Versions not published
ControlLogix® 5580 Versions not published
ControlLogix® 5580 Process Versions not published
GuardLogix 5580 Versions not published
1756-EN4 2.001 No fix stated
Show the 13 other branches
Product Affected versions Fixed in
compactlogix_5480_firmware 36.0 36.0 → < 36.011 36.011
compactlogix_5480_firmware 35.0 35.0 → < 35.013 35.013
compactlogix_5480_firmware 34.0 34.0 → < 34.014 34.014
compactlogix_5480_firmware 33.017 earliest → < 33.017 33.017
compactlogix_5380_process_firmware 36.0 36.0 → < 36.011 36.011
compactlogix_5380_process_firmware 35.0 35.0 → < 35.013 35.013
compactlogix_5380_process_firmware 34.0 34.0 → < 34.014 34.014
compactlogix_5380_process_firmware 33.011 33.011 → < 33.017 33.017
compact_guardlogix_5380_sil2_firmware 36.0 36.0 → < 36.011 36.011
compact_guardlogix_5380_sil2_firmware 35.0 35.0 → < 35.013 35.013
compact_guardlogix_5380_sil2_firmware 34.0 34.0 → < 34.014 34.014
compact_guardlogix_5380_sil2_firmware 32.013 32.013 → < 33.017 33.017
1756-en4_firmware 2.001 2.001 → < 6.001 6.001

Other CVEs of CompactLogix 5380

The 5 CVEs of CompactLogix 5380 →
CVE-2024-6207 CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and… 8.7 High CVE-2024-5659 Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result… 8.3 High CVE-2024-3493 A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send… 8.6 High CVE-2022-3752 An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic … 8.6 High
Track this CVE