Vulnerability Intelligence Report
Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers
CVE-2024-5659
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
No Active Exploit Signals
CVSS Base Score
8.3
HIGH
EPSS Probability:0.31%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-670 ↗CWE-670 Always-Incorrect Control Flow Implementation
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Rockwell Automation | ControlLogix® 5580 | 34.011 (affected) |
| Rockwell Automation | GuardLogix 5580 | 34.011 (affected) |
| Rockwell Automation | 1756-EN4 | 4.001 (affected) |
| Rockwell Automation | CompactLogix 5380 | 34.011 (affected) |
| Rockwell Automation | Compact GuardLogix 5380 | 34.011 (affected) |
| Rockwell Automation | CompactLogix 5480 | 34.011 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.311%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Rockwell Automation · Vendor · USA |
| Reserved | 2024-06-05T16:47:18 |
| Published | 2024-06-14T16:42:20 |
| Patch Date | 2024-06-13 |
| Last Updated | 2024-08-01T21:18:06 |
Community Chatter & Buzz