medium6.5
CVE-2024-5659
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/A…
Impact
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Controllogix 5580 Firmware | Version 34.011 |
| Rockwellautomation | Guardlogix 5580 Firmware | Version 34.011 |
| Rockwellautomation | 1756-En4 Firmware | Version 4.001 |
| Rockwellautomation | Compactlogix 5380 Firmware | Version 34.011 |
| Rockwellautomation | Compact Guardlogix 5380 Firmware | Version 34.011 |
| Rockwellautomation | Compactlogix 5480 Firmware | Version 34.011 |