Compact Guardlogix 5380 Firmware vulnerabilities
8 known vulnerabilities in Compact Guardlogix 5380 Firmware from Rockwell Automation. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
CompactLogix 5380 controllers: Missing Release of Memory after Effective Lifetime
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to
- 7.5 High severity
CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products.
CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.
- 7.5 High severity
A specific malformed fragmented packet type (fragmented packets may be generated automatically…
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 538
- 7.5 High severity
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined…
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target d
- 7.5 High severity
A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP…
A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).
- 8.6 High severity
CompactLogix 5380 controllers: Uncontrolled Resource Consumption
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would
- 9.8 Critical severity
1768 CompactLogix controllers: Inclusion of Functionality from Untrusted Control Sphere
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compile
- 7.2 High severity
Studio 5000 Logix Designer: Improper Control of Generation of Code
Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.