CVE-2024-6207
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.
Published:Oct 14, 2024
Last Modified:Oct 21, 2024
EPS:Oct 14, 2024
EPSS Score:0.00176
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Rockwellautomation
Product
Compact Guardlogix 5380 Sil2 Firmware
Rockwellautomation
Compact Guardlogix 5380 Sil2 Firmware
Vendor
Rockwellautomation
Product
Compact Guardlogix 5380 Sil3 Firmware
Rockwellautomation
Compact Guardlogix 5380 Sil3 Firmware
Vendor
Rockwellautomation
Product
Compact Guardlogix 5380 Sil 2
Rockwellautomation
Compact Guardlogix 5380 Sil 2
Vendor
Rockwellautomation
Product
Compact Guardlogix 5380 Sil 2 Firmware
Rockwellautomation
Compact Guardlogix 5380 Sil 2 Firmware
Vendor
Rockwellautomation
Product
Compact Guardlogix 5380 Sil 3
Rockwellautomation
Compact Guardlogix 5380 Sil 3
Vendor
Rockwellautomation
Product
Compact Guardlogix 5380 Sil 3 Firmware
Rockwellautomation
Compact Guardlogix 5380 Sil 3 Firmware
Vendor
Rockwellautomation
Product
Compactlogix 5380
Rockwellautomation
Compactlogix 5380
Vendor
Rockwellautomation
Product
Compactlogix 5380 Firmware
Rockwellautomation
Compactlogix 5380 Firmware
Vendor
Rockwellautomation
Product
Compactlogix 5480
Rockwellautomation
Compactlogix 5480
Vendor
Rockwellautomation
Product
Compactlogix 5480 Firmware
Rockwellautomation
Compactlogix 5480 Firmware
Vendor
Rockwellautomation
Product
Controllogix 5580
Rockwellautomation
Controllogix 5580
Vendor
Rockwellautomation
Product
Controllogix 5580 Firmware
Rockwellautomation
Controllogix 5580 Firmware
Vendor
Rockwellautomation
Product
Controllogix 5580 Process
Rockwellautomation
Controllogix 5580 Process
Vendor
Rockwellautomation
Product
Controllogix 5580 Process Firmware
Rockwellautomation
Controllogix 5580 Process Firmware
Vendor
Rockwellautomation
Product
Factorytalk Logix Echo
Rockwellautomation
Factorytalk Logix Echo
Vendor
Rockwellautomation
Product
Factorytalk Logix Echo Firmware
Rockwellautomation
Factorytalk Logix Echo Firmware
Vendor
Rockwellautomation
Product
Guardlogix 5580
Rockwellautomation
Guardlogix 5580
Vendor
Rockwellautomation
Product
Guardlogix 5580 Firmware
Rockwellautomation
Guardlogix 5580 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
