HIGH · 8.6

CVE-2024-21916

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault (...

Vulnerability Description

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault (MNRF). The device will restart itself to recover from the MNRF.

CVSS Score

8.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
RockwellautomationControllogix 5570 Controller Firmware20.011
RockwellautomationControllogix 5570 Controller-
RockwellautomationGuardlogix 5570 Controller Firmware20.011
RockwellautomationGuardlogix 5570 Controller-
RockwellautomationControllogix 5570 Redundant Controller Firmware20.054_kit1
RockwellautomationControllogix 5570 Redundant Controller-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-21916?

CVE-2024-21916 is a vulnerability with a CVSS score of 8.6 (HIGH). A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault (...

How severe is CVE-2024-21916?

CVE-2024-21916 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-21916?

Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation Controllogix 5570 Controller Firmware, Rockwellautomation Controllogix 5570 Controller, Rockwellautomation Guardlogix 5570 Controller Firmware, Rockwellautomation Guardlogix 5570 Controller, Rockwellautomation Controllogix 5570 Redundant Controller Firmware.