CVE-2024-21916

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-21916
A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault (MNRF). The device will restart itself to recover from the MNRF.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.rockwellautomation.com/en-us/support/advisory.SD1661.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:rockwellautomation:controllogix_5570_controller_firmware:20.011:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:controllogix_5570_controller:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:rockwellautomation:guardlogix_5570_controller_firmware:20.011:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:guardlogix_5570_controller:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:rockwellautomation:controllogix_5570_redundant_controller_firmware:20.054_kit1:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:controllogix_5570_redundant_controller:-:*:*:*:*:*:*:*
History

08 Feb 2024, 01:34

Type Values Removed Values Added
References () https://www.rockwellautomation.com/en-us/support/advisory.SD1661.html - () https://www.rockwellautomation.com/en-us/support/advisory.SD1661.html - Vendor Advisory
First Time Rockwellautomation guardlogix 5570 Controller
Rockwellautomation controllogix 5570 Controller
Rockwellautomation
Rockwellautomation guardlogix 5570 Controller Firmware
Rockwellautomation controllogix 5570 Redundant Controller
Rockwellautomation controllogix 5570 Redundant Controller Firmware
Rockwellautomation controllogix 5570 Controller Firmware
CVSS v2 : unknown
v3 : 8.6 		v2 : unknown
v3 : 7.5
Summary
  • (es) Existe una vulnerabilidad de denegación de servicio en controladores Rockwell Automation ControlLogix ang GuardLogix. Si se explota, el producto podría experimentar un fallo importante no recuperable (MNRF). El dispositivo se reiniciará solo para recuperarse del MNRF.
CPE cpe:2.3:o:rockwellautomation:guardlogix_5570_controller_firmware:20.011:*:*:*:*:*:*:*
cpe:2.3:o:rockwellautomation:controllogix_5570_redundant_controller_firmware:20.054_kit1:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:controllogix_5570_controller:-:*:*:*:*:*:*:*
cpe:2.3:o:rockwellautomation:controllogix_5570_controller_firmware:20.011:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:guardlogix_5570_controller:-:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:controllogix_5570_redundant_controller:-:*:*:*:*:*:*:*

31 Jan 2024, 19:54

Type Values Removed Values Added
New CVE
Information

Published : 2024-01-31 19:15

Updated : 2024-02-08 01:34

NVD link : CVE-2024-21916

Mitre link : CVE-2024-21916

CVE.ORG link : CVE-2024-21916

JSON object : View

Products Affected

rockwellautomation

  • controllogix_5570_controller_firmware
  • controllogix_5570_controller
  • guardlogix_5570_controller_firmware
  • controllogix_5570_redundant_controller_firmware
  • controllogix_5570_redundant_controller
  • guardlogix_5570_controller
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer