CVE-2024-6207

🗓️ 14 Oct 2024 20:53:49Reported by RockwellType

A security vulnerability allows threat actors to disrupt device operations and end connections

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-6207	10 Oct 202412:00	–	circl
CNNVD	Rockwell Automation多款产品安全漏洞	14 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-6207	14 Oct 202420:53	–	cvelist
EUVD	EUVD-2024-47344	3 Oct 202520:07	–	euvd
ICS	Rockwell Automation ControlLogix	10 Oct 202406:00	–	ics
NVD	CVE-2024-6207	14 Oct 202421:15	–	nvd
Positive Technologies	PT-2024-7383 · Rockwell Automation · Factorytalk Logix Echo +5	10 Oct 202400:00	–	ptsecurity
Tenable Nessus	Rockwell Automation ControlLogix Improper Input Validation (CVE-2024-6207)	21 Oct 202400:00	–	nessus
Vulnrichment	CVE-2024-6207	14 Oct 202420:53	–	vulnrichment

NVD

Node

rockwellautomation controllogix_5580_firmwareRange28.011–33.017

rockwellautomation controllogix_5580_firmwareRange34.011–34.014

rockwellautomation controllogix_5580_firmwareRange35.011–35.013

AND

rockwellautomation controllogix_5580Match-

Node

rockwellautomation controllogix_5580_process_firmwareRange33.011–33.017

rockwellautomation controllogix_5580_process_firmwareRange34.011–34.014

rockwellautomation controllogix_5580_process_firmwareRange35.011–35.013

AND

rockwellautomation controllogix_5580_processMatch-

Node

rockwellautomation guardlogix_5580_firmwareRange31.011–33.017

rockwellautomation guardlogix_5580_firmwareRange34.011–34.014

rockwellautomation guardlogix_5580_firmwareRange35.011–35.013

AND

rockwellautomation guardlogix_5580Match-

Node

rockwellautomation compactlogix_5380_firmwareRange28.011–33.017

rockwellautomation compactlogix_5380_firmwareRange34.011–34.014

rockwellautomation compactlogix_5380_firmwareRange35.011–35.013

AND

rockwellautomation compactlogix_5380Match-

Node

rockwellautomation compact_guardlogix_5380_sil_2_firmwareRange31.011–33.017

rockwellautomation compact_guardlogix_5380_sil_2_firmwareRange34.011–34.014

rockwellautomation compact_guardlogix_5380_sil_2_firmwareRange35.011–35.013

AND

rockwellautomation compact_guardlogix_5380_sil_2Match-

Node

rockwellautomation compact_guardlogix_5380_sil_3_firmwareRange32.013–33.017

rockwellautomation compact_guardlogix_5380_sil_3_firmwareRange34.011–34.014

rockwellautomation compact_guardlogix_5380_sil_3_firmwareRange35.011–35.013

AND

rockwellautomation compact_guardlogix_5380_sil_3Match-

Node

rockwellautomation compactlogix_5480_firmwareRange32.011–33.017

rockwellautomation compactlogix_5480_firmwareRange34.011–34.014

rockwellautomation compactlogix_5480_firmwareRange35.011–35.013

AND

rockwellautomation compactlogix_5480Match-

Node

rockwellautomation factorytalk_logix_echo_firmwareRange33.011–34.014

rockwellautomation factorytalk_logix_echo_firmwareRange35.011–35.013

AND

rockwellautomation factorytalk_logix_echoMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "ControlLogix® 5580",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "V28.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ControlLogix® 5580 Process",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "V33.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "GuardLogix 5580",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "V31.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CompactLogix 5380",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "V28.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Compact GuardLogix 5380 SIL 2",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "V31.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Compact GuardLogix 5380 SIL 3",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "V32.013"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "CompactLogix 5480",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "V32.011"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "FactoryTalk® Logix Echo",
    "vendor": "Rockwell Automation",
    "versions": [
      {
        "status": "affected",
        "version": "V33.011"
      }
    ]
  }
]

Source	Link
rockwellautomation	www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html

21 Oct 2024 13:20Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

CVSS 48.7

EPSS0.00581

SSVC

CWE-20