CVE-2024-6207
- EPSS 0.18%
- Veröffentlicht 14.10.2024 21:15:12
- Zuletzt bearbeitet 21.10.2024 13:20:45
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and ...
CVE-2024-8626
- EPSS 0.15%
- Veröffentlicht 08.10.2024 17:15:56
- Zuletzt bearbeitet 27.02.2025 18:47:11
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected pr...
CVE-2024-6077
- EPSS 0.07%
- Veröffentlicht 12.09.2024 20:15:05
- Zuletzt bearbeitet 19.09.2024 14:31:18
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.
CVE-2024-7515
- EPSS 0.2%
- Veröffentlicht 14.08.2024 20:15:13
- Zuletzt bearbeitet 04.03.2025 17:11:31
CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.
CVE-2024-40619
- EPSS 0.15%
- Veröffentlicht 14.08.2024 20:15:12
- Zuletzt bearbeitet 31.01.2025 15:03:06
CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-serv...
CVE-2024-7507
- EPSS 0.08%
- Veröffentlicht 14.08.2024 20:15:12
- Zuletzt bearbeitet 04.03.2025 17:11:31
CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller.
CVE-2024-5659
- EPSS 0.23%
- Veröffentlicht 14.06.2024 17:15:51
- Zuletzt bearbeitet 27.02.2025 15:15:08
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port....
CVE-2024-3493
- EPSS 0.06%
- Veröffentlicht 15.04.2024 22:15:09
- Zuletzt bearbeitet 04.03.2025 17:11:31
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, Compa...
CVE-2022-3752
- EPSS 0.43%
- Veröffentlicht 19.12.2022 23:15:10
- Zuletzt bearbeitet 21.11.2024 07:20:10
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If t...
CVE-2020-6998
- EPSS 0.49%
- Veröffentlicht 27.07.2022 21:15:08
- Zuletzt bearbeitet 17.04.2025 16:15:21
The connection establishment algorithm found in Rockwell Automation CompactLogix 5370 and ControlLogix 5570 versions 33 and prior does not sufficiently manage its control flow during execution, creating an infinite loop. This may allow an attacker to...