CVE-2024-6207: falha de alta gravidade em Rockwell Automation Compact GuardLogix 5380…
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.6%
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Rockwell Automation · Compact GuardLogix 5380 SIL 2Rockwell Automation · Compact GuardLogix 5380 SIL 3Rockwell Automation · CompactLogix 5380Rockwell Automation · CompactLogix 5480Rockwell Automation · ControlLogix® 5580Rockwell Automation · ControlLogix® 5580 ProcessRockwell Automation · FactoryTalk® Logix EchoRockwell Automation · GuardLogix 5580CVEs relacionadas — Rockwell Automation Compact GuardLogix 5380…
No mesmo produto, das mais perigosas para as menos.
CVE-2022-3752HIGHRockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service AttackEPSS 1.3%CVE-2024-3493HIGHRockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header ValueEPSS 0.6%CVE-2024-6077HIGHRockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIPEPSS 0.6%CVE-2025-24478HIGH5380/5580 Denial-of-Service VulnerabilityEPSS 0.5%CVE-2024-5659HIGHRockwell Automation Multicast Request Causes major nonrecoverable fault on Select ControllersEPSS 0.3%