CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36482

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36482

CVE-2024-36482 : Improper input validation in some Intel® CIP software before version 2.4.10852 may allow a privileged user to escalate privileges via local access. Intel’s advisory (Intel® CIP Software) confirms affected product: Intel® CIP software prior to 2.4.10852. Base/impact metrics from m...

CVE-2024-36482

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36276

CVE-2024-36276 affects Intel® CIP software before version 2.4.10852. The root cause is insecure inherited permissions, which may allow an authenticated user to escalate privileges via local access. Affected product: Intel® CIP software. Impact per document: local privilege escalation with high co...

CVE-2024-36276

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-8819 · Intel · Intel Cip

Name of the Vulnerable Software and Affected Versions: IntelR CIP software versions prior to 2.4.10852 Description: The issue is related to insecure inherited permissions in IntelR CIP software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

The vulnerability of the CIP Message Handler component in Rockwell Automation’s programmable logic controllers ControlLogix 5580, CompactLogix 5380, Compact GuardLogix 5380 SIL 2, Compact GuardLogix 5380 SIL 3, CompactLogix 5480, FactoryTalk Logix Echo allows a intruder to trigger a service failure.

The vulnerability of the CIP Message Handler component in Rockwell Automation’s programmable logic controllers ControlLogix 5580, CompactLogix 5380, Compact GuardLogix 5380 SIL 2, Compact GuardLogix 5380 SIL 3, CompactLogix 5480, and FactoryTalk Logix Echo is related to errors in processing input...

Rockwell Automation ControlLogix Improper Input Validation (CVE-2024-6207)

A denial-of-service vulnerability exists in the affected products that will cause the device to result in a major nonrecoverable fault MNRF when it receives an invalid CIP request. To exploit this vulnerability a malicious user must chain this exploits with CVE-2021-22681 and send a specially...

CVE-2024-6207

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including th...

CVE-2024-6207

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including th...

CVE-2024-6207

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including th...

CVE-2024-9124 Rockwell Automation PowerFlex 6000T CIP Security denial-of-service Vulnerability

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 600T. If the device is overloaded with requests, it will become unavailable. The device may require a power cycle to recover it if it does not re-establish a connection after it stops receiving requests...

Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380 Improper Input Validation (CVE-2024-6077)

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover. This plugin only works with Tenable.ot. Please visit...

Rockwell Automation 5015-U8IHFT Denial of Service Vulnerability

The Rockwell Automation 5015-U8IHFT is a general purpose module from Rockwell Automation. A denial of service vulnerability exists in the Rockwell Automation 5015-U8IHFT, which can be exploited by an attacker to cause a denial of service when sending a specially crafted packet to a CIP security...

CVE-2024-6077

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover...

CVE-2024-6077 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover...

CVE-2024-6077

CVE-2024-6077 affects Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380 families. The root cause is improper input validation on the CIP Security object, leading to a denial-of-service where specially crafted packets can render the device unavailable and re...

CVE-2024-6077 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover...