high7.5
CVE-2024-6207
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the d…
Impact
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Controllogix 5580 Firmware | from 28.011 before 33.017 from 34.011 before 34.014 from 35.011 before 35.013 |
| Rockwellautomation | Controllogix 5580 Process Firmware | from 33.011 before 33.017 from 34.011 before 34.014 from 35.011 before 35.013 |
| Rockwellautomation | Guardlogix 5580 Firmware | from 31.011 before 33.017 from 34.011 before 34.014 from 35.011 before 35.013 |
| Rockwellautomation | Compactlogix 5380 Firmware | from 28.011 before 33.017 from 34.011 before 34.014 from 35.011 before 35.013 |
| Rockwellautomation | Compact Guardlogix 5380 Sil 2 Firmware | from 31.011 before 33.017 from 34.011 before 34.014 from 35.011 before 35.013 |
| Rockwellautomation | Compact Guardlogix 5380 Sil 3 Firmware | from 32.013 before 33.017 from 34.011 before 34.014 from 35.011 before 35.013 |
| Rockwellautomation | Compactlogix 5480 Firmware | from 32.011 before 33.017 from 34.011 before 34.014 from 35.011 before 35.013 |
| Rockwellautomation | Factorytalk Logix Echo Firmware | from 33.011 before 34.014 from 35.011 before 35.013 |