CVE-2024-6207: Rockwell Automation ControlLogix® 5580, невалидиран

Описание

Оригинално описание

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.

Засегнати продукти

• Rockwell Automation ControlLogix® 5580: V28.011
• Rockwell Automation ControlLogix® 5580 Process: V33.011
• Rockwell Automation GuardLogix 5580: V31.011
• Rockwell Automation CompactLogix 5380: V28.011
• Rockwell Automation Compact GuardLogix 5380 SIL 2: V31.011
• Rockwell Automation Compact GuardLogix 5380 SIL 3: V32.013
• Rockwell Automation CompactLogix 5480: V32.011
• Rockwell Automation FactoryTalk® Logix Echo: V33.011
• rockwellautomation: още 5 продукта, добавени от rockwellautomation

  compactlogix_5380_firmware, controllogix_5580_process_firmware, guardlogix_5580_firmware, compact_guardlogix_5380_sil3_firmware, factorytalk_logix_echo

Вид слабост

• CWE-20 Неправилно валидиране на входните данни

История

Други уязвимости в Rockwell Automation ControlLogix® 5580

• 8.2CVE-2025-9166
• 7.1CVE-2025-24478
• 8.7CVE-2024-8626
• 8.7CVE-2024-6077
• 8.7CVE-2024-40619

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2024-6207
• https://nvd.nist.gov/vuln/detail/CVE-2024-6207
• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html