CVE-2024-3493: high-severity vulnerability in Rockwell Automation ControlLogix 5580
Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 0.6%
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected products
Rockwell Automation · 1756-EN4TRRockwell Automation · CompactLogix 5380Rockwell Automation · ControlLogix 5580Rockwell Automation · GuardLogix 5580Related CVEs — Rockwell Automation ControlLogix 5580
In the same product, most dangerous first.
CVE-2024-6242HIGHRockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix DevicesEPSS 11.1%CVE-2022-3752HIGHRockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service AttackEPSS 1.3%CVE-2024-6077HIGHRockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIPEPSS 0.6%CVE-2024-6207HIGHCVE-2024-6207EPSS 0.6%CVE-2024-8626HIGHLogix Controllers Vulnerable to Denial-of-Service VulnerabilityEPSS 0.5%CVE-2024-5659HIGHRockwell Automation Multicast Request Causes major nonrecoverable fault on Select ControllersEPSS 0.3%