CVE-2024-6077

🗓️ 12 Sep 2024 19:59:40Reported by RockwellType

A denial-of-service vulnerability exists in Rockwell Automation products due to specially crafted packets in CIP Security Objec

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-6077	12 Sep 202422:43	–	circl
CNNVD	Rockwell Automation CompactLogix 安全漏洞	12 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-6077 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP	12 Sep 202419:59	–	cvelist
EUVD	EUVD-2024-47235	3 Oct 202520:07	–	euvd
ICS	Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380	12 Sep 202406:00	–	ics
NVD	CVE-2024-6077	12 Sep 202420:15	–	nvd
Positive Technologies	PT-2024-6546 · Rockwell Automation · Controllogix/Guardlogix 5580 +1	12 Sep 202400:00	–	ptsecurity
Tenable Nessus	Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380 Improper Input Validation (CVE-2024-6077)	23 Sep 202400:00	–	nessus
Vulnrichment	CVE-2024-6077 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP	12 Sep 202419:59	–	vulnrichment

NVD

Node

rockwellautomation compactlogix_5380_firmwareMatch32.011

AND

rockwellautomation compactlogix_5380Match-

Node

rockwellautomation compact_guardlogix_5380_sil_2_firmwareMatch32.013

AND

rockwellautomation compact_guardlogix_5380_sil_2Match-

Node

rockwellautomation compact_guardlogix_5380_sil_3_firmwareMatch32.011

AND

rockwellautomation compact_guardlogix_5380_sil_3Match-

Node

rockwellautomation compactlogix_5480_firmwareMatch32.011

AND

rockwellautomation compactlogix_5480Match-

Node

rockwellautomation controllogix_5580_firmwareMatch33.011

AND

rockwellautomation controllogix_5580Match-

Node

rockwellautomation guardlogix_5580_firmwareMatch32.011

AND

rockwellautomation guardlogix_5580Match-

Node

rockwellautomation 1756-en4_firmwareMatch2.001

AND

rockwellautomation 1756-en4Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "CompactLogix 5380",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "v.32 .011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CompactLogix 5380 Process",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "v.33.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Compact GuardLogix 5380 SIL 2",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "v.32.013"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Compact GuardLogix 5380 SIL 3",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "v.32.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CompactLogix 5480",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "v.32.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ControlLogix® 5580",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "v.32.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ControlLogix® 5580 Process",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "v.33.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GuardLogix 5580",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "v.32.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "1756-EN4",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "v2.001"
      }
    ]
  }
]

Source	Link
rockwellautomation	www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1963.html

19 Sep 2024 14:31Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 48.7

EPSS0.00341

SSVC

CWE-20