CVE-2017-6024: rockwellautomation compactlogix_5380_firmware Uncontrolled Resource Consumption
Vulnerability summary
CVE-2017-6024 is a high (CVSS 7.1) Uncontrolled Resource Consumption vulnerability in rockwellautomation compactlogix_5380_firmware. EPSS estimates a 2.63% chance of exploitation in the next 30 days, higher than 85.3% of scored vulnerabilities.
Timeline
- 06-05-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause a denial of service condition by sending a series of specific CIP-based commands to the controller.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.63%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.63% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Rockwellautomation2 products
- compactlogix_5380_firmwarev28.011 | v29.011
- controllogix_5580_firmwarev28.011 | v28.012 | v28.013 | v29.011
1 vendor · 2 products
References
2 links- ics-cert.us-cert.gov/advisories/ICSA-17-094-05X Refsource MISCThird Party AdvisoryUS Government Resource