← Database

CVE-2024-6207

HIGH CVSS: 7.5 Published: 2024-10-14 Modified: 2026-06-17

Description

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.

Affected Platforms

Rockwellautomation Compact Guardlogix 5380 Sil 3 FirmwareRockwellautomation Compactlogix 5480 FirmwareRockwellautomation Guardlogix 5580Rockwellautomation Compactlogix 5380 FirmwareRockwellautomation Factorytalk Logix Echo FirmwareRockwellautomation Factorytalk Logix EchoRockwellautomation Compact Guardlogix 5380 Sil 2Rockwellautomation Compact Guardlogix 5380 Sil 3Rockwellautomation Compactlogix 5480Rockwellautomation Controllogix 5580 Process

Weakness Type

CWE-20, NVD-CWE-noinfo

References