Lucene search

[email protected]CVE-2024-21916

HistoryJan 31, 2024 - 7:15 p.m.

CVE-2024-21916

2024-01-3119:15:08

CWE-119

[email protected]

web.nvd.nist.gov

cve-2024-21916

vulnerability

denial-of-service

rockwell automation

controllogix

guardlogix

nvd

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

18.1%

JSON

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault (MNRF). The device will restart itself to recover from the MNRF.

Affected configurations

NVD

Node

rockwellautomationcontrollogix_5570_controllerMatch-

AND

rockwellautomationcontrollogix_5570_controller_firmwareMatch20.011

Node

rockwellautomationguardlogix_5570_controllerMatch-

AND

rockwellautomationguardlogix_5570_controller_firmwareMatch20.011

Node

rockwellautomationcontrollogix_5570_redundant_controllerMatch-

AND

rockwellautomationcontrollogix_5570_redundant_controller_firmwareMatch20.054_kit1

CPENameOperatorVersion
rockwellautomation:controllogix_5570_controller_firmwarerockwellautomation controllogix 5570 controller firmwareeq20.011

CPE	Name	Operator	Version
rockwellautomation:controllogix_5570_controller_firmware	rockwellautomation controllogix 5570 controller firmware	eq	20.011

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ControlLogix® 5570",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "20.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GuardLogix® 5570",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "20.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ControlLogix® 5570 redundant",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "20.054_kit1"
      }
    ]
  }
]