NetSight
medium6.5

CVE-2024-5659

Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/A…

Impact

Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.

Affected products

VendorProductAffected versions
RockwellautomationControllogix 5580 Firmware
Version 34.011
RockwellautomationGuardlogix 5580 Firmware
Version 34.011
Rockwellautomation1756-En4 Firmware
Version 4.001
RockwellautomationCompactlogix 5380 Firmware
Version 34.011
RockwellautomationCompact Guardlogix 5380 Firmware
Version 34.011
RockwellautomationCompactlogix 5480 Firmware
Version 34.011

Weakness classification

References