What’s Vulnerable › Vulnerabilities

CVE-2024-6242: Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices

• Severity: high (CVSS 7.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 11.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-01 · updated 2026-06-17
• Weakness: CWE-420

Description

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.

Affected products

• Rockwell Automation 1756-EN2F: v5.007(unsigned)/v5.027(signed), 1756-EN2F/C: V10.009
• Rockwell Automation 1756-EN2T: v5.007(unsigned)/v5.027(signed), 1756-EN2T/D: V10.006
• Rockwell Automation 1756-EN2TP: 1756-EN2TP/A: V10.020
• Rockwell Automation 1756-EN2TR: v5.007(unsigned)/v5.027(signed), 1756-EN2TR/C: V10.007
• Rockwell Automation 1756-EN3TR: v5.007(unsigned)/v5.027(signed), 1756-EN3TR/B: V10.007
• Rockwell Automation 1756-EN4TR: V2
• Rockwell Automation ControlLogix® 5580 (1756-L8z): V28
• Rockwell Automation GuardLogix® 5580 (1756-L8zS): V31

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1682.html

Get alerted when CVE-2024-6242 or the next vulnerability affects your stack