// For flags

CVE-2024-40619

Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling

Severity Score

8.7
*CVSS v4

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

CVE-2024-40619 IMPACT

A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Attack Requirements
None
Privileges Required
None
User Interaction
None
System
Vulnerable | Subsequent
Confidentiality
None
None
Integrity
None
None
Availability
High
None
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2024-07-08 CVE Reserved
  • 2024-08-14 CVE Published
  • 2024-08-15 EPSS Updated
  • 2024-08-19 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-754: Improper Check for Unusual or Exceptional Conditions
CAPEC
  • CAPEC-153: Input Data Manipulation
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Rockwell Automation
Search vendor "Rockwell Automation"
 ControlLogix® 5580
Search vendor "Rockwell Automation" for product "ControlLogix® 5580"
 34.011
Search vendor "Rockwell Automation" for product "ControlLogix® 5580" and version "34.011"
en
Affected
Rockwell Automation
Search vendor "Rockwell Automation"
 GuardLogix 5580
Search vendor "Rockwell Automation" for product "GuardLogix 5580"
 34.011
Search vendor "Rockwell Automation" for product "GuardLogix 5580" and version "34.011"
en
Affected