17 matches found
Rockwell Automation CRL Bypass
The vulnerability of the Certificate Revocation List CRL function in Rockwell Automation’s programmable logic controllers ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, and Compact GuardLogix 5380 is related to improper verification of certificate revocation. Exploiting this vulnerability...
CISA Releases Two Industrial Control Systems Advisories
CISA released two Industrial Control Systems ICS advisories on February 18, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-191-01 Delta Electronics CNCSoft-G2 Update A ICSA-25-035-02 Rockwell Automation...
Rockwell Automation GuardLogix 5380 and 5580 (Update A)
RISK EVALUATION Successful exploitation of this vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...
Security vulnerabilities in Rockwell Automation GuardLogix 5580 and Rockwell Automation GuardLogix 5380
The Rockwell Automation GuardLogix 5580 and Rockwell Automation GuardLogix 5380 are both programmable logic controllers from Rockwell Automation. A security vulnerability exists in the Rockwell Automation GuardLogix 5580 and Rockwell Automation GuardLogix 5380. An attacker could exploit this...
PT-2024-8139
Name of the Vulnerable Software and Affected Versions: Rockwell Automation products affected versions not specified ControlLogix 5580 versions no specific range provided GuardLogix 5580 versions no specific range provided CompactLogix 5380 versions no specific range provided CompactLogix 5480...
Rockwell Automation ControlLogix 5580 GuardLogix 5580 Malfunction
The vulnerability of the microprogrammed software in Rockwell Automation’s ControlLogix 5580 and GuardLogix 5580 systems is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause malfunctions during maintenance operations...
CVE-2024-6077 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover...
Rockwell Automation GuardLogix 5580 and ControlLogix 5580 Denial of Service Vulnerability
Rockwell Automation ControlLogix and Rockwell Automation GuardLogix are both products of Rockwell Automation, U.S.A. Rockwell Automation ControlLogix is a controller. Rockwell Automation GuardLogix is a series of controllers. A denial of service vulnerability exists in the Rockwell Automation...
Rockwell Automation ControlLogix and Rockwell Automation GuardLogix security vulnerabilities
Rockwell Automation ControlLogix and Rockwell Automation GuardLogix are both products of Rockwell Automation, U.S.A. Rockwell Automation ControlLogix is a controller. Rockwell Automation GuardLogix is a series of controllers. A denial of service vulnerability exists in the Rockwell Automation...
Rockwell Automation GuardLogix/ControlLogix 5580 Controller
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ControlLogix 5580, GuardLogix 5580 Vulnerability : Improper Check for Unusual or Exceptional Conditions 2. RISK EVALUATION Successful exploitation of this...
PT-2024-6589 · Rockwell Automation · Controllogix 5580 +1
Name of the Vulnerable Software and Affected Versions: Rockwell Automation ControlLogix 5580 versions affected versions not specified Rockwell Automation GuardLogix 5580 versions affected versions not specified Description: A denial-of-service issue exists due to insufficient exception handling i...
Rockwell Automation ControlLogix and GuardLogix Improper Input Validation (CVE-2024-3493)
A specific malformed fragmented packet type fragmented packets may be generated automatically by devices that send large amounts of data can cause a major nonrecoverable fault MNRF. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally...
PT-2024-5057
Name of the Vulnerable Software and Affected Versions: ControlLogix 5580 versions not specified GuardLogix 5580 versions not specified CompactLogix 5380 versions not specified CompactLogix 5480 versions not specified Compact GuardLogix 5380 versions not specified 1756-EN4TR versions not specified...
CVE-2024-3493: Improper Input Validation
A specific malformed fragmented packet type fragmented packets may be generated automatically by devices that send large amounts of data can cause a major nonrecoverable fault MNRF Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the...
Rockwell Automation Studio 5000 Logix Designer
1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: Studio 5000 Logix Designer Vulnerability: Code Injection 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to download a modified program to the...
Rockwell Automation Logix Controllers
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Logix Controllers Vulnerability: Inclusion of Functionality from Untrusted Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...