Rockwellautomation Compact Guardlogix 5380 vulnerabilities
6 vulnerabilities
Known vulnerabilities in Rockwellautomation Compact Guardlogix 5380, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-1797rockwell automationcompact guardlogix 5370 controllers+17
EPSS score2.16%
A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.CVE-2022-3752rockwell automationcompact guardlogix 5380+9EPSS score1.30%
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic
loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload
the user project file to bring the device back online and continue normal operation.CVE-2022-3157rockwell automationcompact guardlogix+10EPSS score1.52%
A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-of-service condition (DOS).CVE-2024-5659rockwell automation1756-en4+11EPSS score0.31%
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.CVE-2024-8626rockwell automation1756-en4tr+10EPSS score0.52%
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.CVE-2024-3493rockwell automation1756-en4tr+11EPSS score0.64%
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.