7.5

CVE-2024-6207

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device.  If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation.  To recover the controllers, a download is required which ends any process that the controller is running.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rockwellautomation ≫ Controllogix 5580 Firmware Version >= 28.011 < 33.017
Rockwellautomation ≫ Controllogix 5580 Firmware Version >= 34.011 < 34.014
Rockwellautomation ≫ Controllogix 5580 Firmware Version >= 35.011 < 35.013
Rockwellautomation ≫ Guardlogix 5580 Firmware Version >= 31.011 < 33.017
   Rockwellautomation ≫ Guardlogix 5580 Version -
Rockwellautomation ≫ Guardlogix 5580 Firmware Version >= 34.011 < 34.014
   Rockwellautomation ≫ Guardlogix 5580 Version -
Rockwellautomation ≫ Guardlogix 5580 Firmware Version >= 35.011 < 35.013
   Rockwellautomation ≫ Guardlogix 5580 Version -
Rockwellautomation ≫ Compactlogix 5380 Firmware Version >= 28.011 < 33.017
Rockwellautomation ≫ Compactlogix 5380 Firmware Version >= 34.011 < 34.014
Rockwellautomation ≫ Compactlogix 5380 Firmware Version >= 35.011 < 35.013
Rockwellautomation ≫ Compactlogix 5480 Firmware Version >= 32.011 < 33.017
Rockwellautomation ≫ Compactlogix 5480 Firmware Version >= 34.011 < 34.014
Rockwellautomation ≫ Compactlogix 5480 Firmware Version >= 35.011 < 35.013
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.55% 0.422
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
PSIRT@rockwellautomation.com 8.7 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
PSIRT@rockwellautomation.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html
Vendor Advisory