PT-2024-5890 · Rockwell Automation · Controllogix/Guardlogix 5580+1

Published 2024-08-13 · Updated 2024-08-15 · CVE-2024-7515

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Rockwell Automation ControlLogix/GuardLogix 5580 versions (affected versions not specified) Rockwell Automation CompactLogix/Compact GuardLogix 5380 versions (affected versions not specified)

Description The issue is related to errors in processing input data, which can be exploited by a remote attacker to cause a denial-of-service by sending a specially crafted PTP packet. This can result in a major nonrecoverable fault in the controller.

Recommendations For Rockwell Automation ControlLogix/GuardLogix 5580, consider restricting access to the PTP management packet handling functionality until a patch is available. For Rockwell Automation CompactLogix/Compact GuardLogix 5380, avoid using the PTP protocol in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-06693

CVE-2024-7515

Affected Products

Compactlogix/Compact Guardlogix 5380

Controllogix/Guardlogix 5580

References · 8

• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201686.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06693 · Security Note
• https://osv.dev/vulnerability/CVE-2024-7515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7515 · Security Note
• https://twitter.com/CVEnew/status/1823819269819523400 · Twitter Post
• https://t.me/cvedetector/3199 · Telegram Post
• https://twitter.com/CveFindCom/status/1823812211267043370 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1823426566732292123 · Twitter Post