Rockwell Automation Compact Guardlogix® 5380 Controllers vulnerabilities
3 vulnerabilities
Known vulnerabilities in Rockwell Automation Compact Guardlogix® 5380 Controllers, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-1797rockwell automationcompact guardlogix 5370 controllers+17
EPSS score2.16%
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.CVE-2022-1161rockwell automation1768 compactlogix controllers+16EPSS score5.21%
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.CVE-2024-8626rockwell automation1756-en4tr+10EPSS score0.52%
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.