What’s Vulnerable › Vulnerabilities

CVE-2024-3493: Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-15 · updated 2026-06-17
• Weakness: CWE-20

Description

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.

Affected products

• Rockwellautomation 1756-En4Tr Firmware: 5.001
• Rockwellautomation Compact Guardlogix 5380 Firmware: 35.011
• Rockwellautomation Compactlogix 5380 Firmware: 35.011
• Rockwellautomation Compactlogix 5380 Process Firmware: 35.011
• Rockwellautomation Compactlogix 5480 Firmware: 35.011
• Rockwell Automation ControlLogix® 5580: 35.011
• Rockwellautomation Controllogix 5580 Process Firmware: 35.011
• Rockwellautomation Guardlogix 5580 Firmware: 35.011

References

• https://www.rockwellautomation.com/en-us/support/advisory.SD1666.html
• https://www.rockwellautomation.com/en-us/support/advisory.SD1666.html

Get alerted when CVE-2024-3493 or the next vulnerability affects your stack