Controllogix 5580 Firmware vulnerabilities
10 known vulnerabilities in Controllogix 5580 Firmware from Rockwell Automation. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
ControlLogix® 5580: NULL Pointer Dereference
A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.
- 7.5 High severity
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/adviso…
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connecti
- 7.5 High severity
CompactLogix 5380 controllers: Missing Release of Memory after Effective Lifetime
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to
- 7.5 High severity
A denial-of-service vulnerability exists in the Rockwell Automation affected products when…
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.
- 7.5 High severity
CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products.
CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.
- 7.5 High severity
ControlLogix® 5580: Improper Check for Unusual or Exceptional Conditions
CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.
- 7.5 High severity
A specific malformed fragmented packet type (fragmented packets may be generated automatically…
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 538
- 8.6 High severity
CompactLogix 5380 controllers: Uncontrolled Resource Consumption
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would
- 9.8 Critical severity
1768 CompactLogix controllers: Inclusion of Functionality from Untrusted Control Sphere
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compile
- 7.2 High severity
Studio 5000 Logix Designer: Improper Control of Generation of Code
Rockwell Automation Studio 5000 Logix Designer (all versions) are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user.