8.7
Élevée
CVE-2024-6207 CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and…
Description
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ControlLogix® 5580 | 28.011 | Pas de correctif indiqué |
| ControlLogix® 5580 Process | 33.011 | Pas de correctif indiqué |
| GuardLogix 5580 | 31.011 | Pas de correctif indiqué |
| CompactLogix 5380 | 28.011 | Pas de correctif indiqué |
| Compact GuardLogix 5380 SIL 2 | 31.011 | Pas de correctif indiqué |
| Compact GuardLogix 5380 SIL 3 | 32.013 | Pas de correctif indiqué |
| CompactLogix 5480 | 32.011 | Pas de correctif indiqué |
| FactoryTalk® Logix Echo | 33.011 | Pas de correctif indiqué |
| compactlogix_5380_firmware 36.0 | 36.0 → < 36.011 | 36.011 |
Afficher les 18 autres branches Masquer les 18 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| compactlogix_5380_firmware 35.0 | 35.0 → < 35.013 | 35.013 |
| compactlogix_5380_firmware 34.0 | 34.0 → < 34.014 | 34.014 |
| compactlogix_5380_firmware 28.011 | 28.011 → < 33.017 | 33.017 |
| controllogix_5580_process_firmware 36.0 | 36.0 → < 36.011 | 36.011 |
| controllogix_5580_process_firmware 35.0 | 35.0 → < 35.013 | 35.013 |
| controllogix_5580_process_firmware 34.0 | 34.0 → < 34.014 | 34.014 |
| controllogix_5580_process_firmware 32.011 | 32.011 → < 33.017 | 33.017 |
| guardlogix_5580_firmware 36.0 | 36.0 → < 36.011 | 36.011 |
| guardlogix_5580_firmware 35.0 | 35.0 → < 35.013 | 35.013 |
| guardlogix_5580_firmware 34.0 | 34.0 → < 34.014 | 34.014 |
| guardlogix_5580_firmware 31.011 | 31.011 → < 33.017 | 33.017 |
| compact_guardlogix_5380_sil3_firmware 36.0 | 36.0 → < 36.011 | 36.011 |
| compact_guardlogix_5380_sil3_firmware 35.0 | 35.0 → < 35.013 | 35.013 |
| compact_guardlogix_5380_sil3_firmware 34.0 | 34.0 → < 34.014 | 34.014 |
| compact_guardlogix_5380_sil3_firmware 32.013 | 32.013 → < 33.017 | 33.017 |
| factorytalk_logix_echo 36.0 | 36.0 → < 36.011 | 36.011 |
| factorytalk_logix_echo 35.0 | 35.0 → < 35.013 | 35.013 |
| factorytalk_logix_echo 33.011 | 33.011 → < 34.014 | 34.014 |
Autres CVE de ControlLogix® 5580
Les 5 CVE de ControlLogix® 5580 →
CVE-2025-9166
A denial-of-service security issue exists in the affected product and version
8.2
Élevée
CVE-2024-6077
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are…
8.7
Élevée
CVE-2024-40619
CVE-2024-40619 IMPACT
A denial-of-service vulnerability exists in the affected products
8.7
Élevée
CVE-2024-5659
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result…
8.3
Élevée