CVE-2024-3493: falha de alta gravidade em Rockwell Automation ControlLogix 5580
Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 0.6%
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Rockwell Automation · 1756-EN4TRRockwell Automation · CompactLogix 5380Rockwell Automation · ControlLogix 5580Rockwell Automation · GuardLogix 5580CVEs relacionadas — Rockwell Automation ControlLogix 5580
No mesmo produto, das mais perigosas para as menos.
CVE-2024-6242HIGHRockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix DevicesEPSS 11.1%CVE-2022-3752HIGHRockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service AttackEPSS 1.3%CVE-2024-6077HIGHRockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIPEPSS 0.6%CVE-2024-6207HIGHCVE-2024-6207EPSS 0.6%CVE-2024-8626HIGHLogix Controllers Vulnerable to Denial-of-Service VulnerabilityEPSS 0.5%CVE-2024-5659HIGHRockwell Automation Multicast Request Causes major nonrecoverable fault on Select ControllersEPSS 0.3%