Rockwell Automation Controllogix 5580 Controllers vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rockwell Automation Controllogix 5580 Controllers, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.6CVE-2022-1797rockwell automationcompact guardlogix 5370 controllers+17
EPSS score
2.16%
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.10CVE-2022-1161rockwell automation1768 compactlogix controllers+16
EPSS score
5.21%
An attacker with the ability to modify a user program may change user program code on some ControlLogix, CompactLogix, and GuardLogix Control systems. Studio 5000 Logix Designer writes user-readable program code to a separate location than the executed compiled code, allowing an attacker to change one and not the other.