CVE-2024-40619

CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service...

CVE-2024-40619 Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling

CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service...

CVE-2024-40619

CVE-2024-40619 affects Rockwell Automation GuardLogix/ControlLogix 5580 PLCs. The vulnerability arises from an improper check for unusual or exceptional conditions in handling CIP packets received over the network, causing a major nonrecoverable fault and denial-of-service. Affected products incl...

CVE-2023-43489

Improper access control for some IntelR CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-43489

Improper access control for some IntelR CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-43489

CVE-2023-43489 affects Intel® CIP software prior to version 2.4.10717. The root cause is an improper access control that may allow an authenticated local user to potentially cause a denial of service . The issue is documented with CVSS metrics (3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H; 4.0: AV:L/...

CVE-2023-43489

Improper access control for some IntelR CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-7567

A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 2080 -L50E/2080 -L70E. If exploited, the CIP/Modbus communication may be disrupted for short duration...

CVE-2024-7567 Rockwell Automation Micro850/870 Vulnerable to denial-of-service Vulnerability via CIP/Modbus Port

A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 2080 -L50E/2080 -L70E. If exploited, the CIP/Modbus communication may be disrupted for short duration...

CVE-2024-7567 Rockwell Automation Micro850/870 Vulnerable to denial-of-service Vulnerability via CIP/Modbus Port

A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 2080 -L50E/2080 -L70E. If exploited, the CIP/Modbus communication may be disrupted for short duration...

Rockwell Automation Micro850/870

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Micro850/870 Vulnerability : Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may cause CIP/Modbus...

Rockwell Automation GuardLogix/ControlLogix 5580 Controller

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ControlLogix 5580, GuardLogix 5580 Vulnerability : Improper Check for Unusual or Exceptional Conditions 2. RISK EVALUATION Successful exploitation of this...

PT-2024-7652 · Intel · Intel Cip

Name of the Vulnerable Software and Affected Versions: IntelR CIP software versions prior to 2.4.10717 Description: The issue is related to improper access control in IntelR CIP software, which may allow an authenticated user to potentially enable denial of service via local access. This is also...

Rockwell Automation Logix Controllers Unprotected Alternate Channel (CVE-2024-6242)

A vulnerability exists in the affected products that allows a threat actor to bypass the Trusted Slot feature in a ControlLogix controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device...

Critical Flaw in Rockwell Automation Devices Allows Unauthorized Access

A high-severity security bypass vulnerability has been disclosed in Rockwell Automation ControlLogix 1756 devices that could be exploited to execute common industrial protocol CIP programming and configuration commands. The flaw, which is assigned the CVE identifier CVE-2024-6242, carries a CVSS...

CVE-2024-6242

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/...

CVE-2024-6242 Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/...

CVE-2024-6242

CVE-2024-6242 – Rockwell Automation ControlLogix/Logix devices is a vulnerability that bypasses the Trusted Slot protection via an unprotected alternate channel in 1756 chassis. A threat actor could send CIP programming/configuration commands to modify user projects or device configuration on aff...

CVE-2024-6242 Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/...

CVE-2024-6325

The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html by...