The vulnerability of the Trusted Slot function in Rockwell Automation’s microprogrammed logic controllers models 1756-EN4TR, 1756-EN2T Series A/B/C, 1756-EN2F Series A/B, 1756-EN2TR Series A/B, 1756-EN3TR Series B, 1756-EN2T Series D, 1756-EN2F Series C, 1756-EN2TR Series C, 1756-EN3TR Series B, 1756-EN2TP Series A. This vulnerability allows a attacker to modify user projects and/or device configurations.

🗓️ 02 Aug 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Rockwell Trusted Slot flaw lets unauthorized project changes through an unprotected channel.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-6242	1 Aug 202418:46	–	circl
CNNVD	Rockwell Automation ControlLogix 安全漏洞	1 Aug 202400:00	–	cnnvd
CVE	CVE-2024-6242	1 Aug 202415:15	–	cve
Cvelist	CVE-2024-6242 Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices	1 Aug 202415:15	–	cvelist
EUVD	EUVD-2024-47370	3 Oct 202520:07	–	euvd
ICS	Rockwell Automation Logix Controllers	1 Aug 202406:00	–	ics
NVD	CVE-2024-6242	1 Aug 202416:15	–	nvd
Positive Technologies	PT-2024-5335	1 Aug 202400:00	–	ptsecurity
Tenable Nessus	Rockwell Automation Logix Controllers Unprotected Alternate Channel (CVE-2024-6242)	8 Aug 202400:00	–	nessus
The Hacker News	Critical Flaw in Rockwell Automation Devices Allows Unauthorized Access	5 Aug 202406:07	–	thn

Vulners

Node

rockwell_automation controllogix_5580Range<32.016

OR

rockwell_automation controllogix_5580Range33.0–33.015

OR

rockwell_automation controllogix_5580Range34.0–34.014

OR

rockwell_automation controllogix_5580Range35.0–35.011

OR

rockwell_automation guardlogix_5580Range<32.016

OR

rockwell_automation guardlogix_5580Range33.0–33.015

OR

rockwell_automation guardlogix_5580Range34.0–34.014

OR

rockwell_automation guardlogix_5580Range35.0–35.011

OR

rockwell_automation 1756-en4trRange<5.001

OR

rockwell_automation 1756-en2t_series_dRange<12.001

OR

rockwell_automation 1756-en2f_series_cRange<12.001

OR

rockwell_automation 1756-en2tr_series_cRange<12.001

OR

rockwell_automation 1756-en3tr_series_bRange<12.001

OR

rockwell_automation 1756-en2tp_series_aRange<12.001

Source	Link
rockwellautomation	www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1682.html
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-214-09
web	www.web.nvd.nist.gov/view/vuln/detail

02 Aug 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.8

CVSS 38.4

EPSS0.09197

rockwell automation trusted slot vulnerability unprotected channel industrial controllers microprogrammed controllers project modification