CVE-2024-40619: falha de alta gravidade em Rockwell Automation ControlLogix® 5580
Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.6%
CVE-2024-40619 IMPACT
A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVEs relacionadas — Rockwell Automation ControlLogix® 5580
No mesmo produto, das mais perigosas para as menos.
CVE-2022-3752HIGHRockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service AttackEPSS 1.3%CVE-2024-3493HIGHRockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header ValueEPSS 0.6%CVE-2024-6077HIGHRockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIPEPSS 0.6%CVE-2024-6207HIGHCVE-2024-6207EPSS 0.6%CVE-2025-9166HIGHRockwell Automation ControlLogix® 5580 V35.013 Denial-Of-ServiceEPSS 0.4%CVE-2024-5659HIGHRockwell Automation Multicast Request Causes major nonrecoverable fault on Select ControllersEPSS 0.3%