What’s Vulnerable › Vulnerabilities

CVE-2024-5659: Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-14 · updated 2026-06-17
• Weakness: CWE-670

Description

Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.

Affected products

• Rockwellautomation 1756-En4 Firmware: 4.001
• Rockwellautomation Compact Guardlogix 5380 Firmware: 34.011
• Rockwellautomation Compactlogix 5380 Firmware: 34.011
• Rockwellautomation Compactlogix 5480 Firmware: 34.011
• Rockwell Automation ControlLogix® 5580: 34.011
• Rockwellautomation Guardlogix 5580 Firmware: 34.011

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1673.html
• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1673.html

Get alerted when CVE-2024-5659 or the next vulnerability affects your stack