ControlLogix® 5580 vulnerabilities
6 known vulnerabilities in ControlLogix® 5580 from Rockwell Automation. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
ControlLogix® 5580: NULL Pointer Dereference
A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.
- 7.5 High severity
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/adviso…
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connecti
- 7.5 High severity
A denial-of-service vulnerability exists in the Rockwell Automation affected products when…
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.
- 7.5 High severity
ControlLogix® 5580: Improper Check for Unusual or Exceptional Conditions
CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.
- 7.5 High severity
A specific malformed fragmented packet type (fragmented packets may be generated automatically…
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 538
- 7.5 High severity
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined…
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target d