Rockwell Automation ControlLogix, GuardLogix, and CompactLogix

Risk Summary

Successful exploitation of this vulnerability could compromise the availability of the device.

CVEs (1)

Remediations

• Rockwell Automation offers users the following solutions:
• ControlLogix 5580: corrected in V34.014, V35.013, V36.011 and later
• GuardLogix 5580: corrected in V34.014, V35.013, V36.011 and later
• 1756-EN4: corrected in V6.001 and later
• CompactLogix 5380: corrected in V34.014, V35.013, V36.011 and later
• Compact GuardLogix 5380: corrected in V34.014, V35.013, V36.011 and later
• CompactLogix 5480: corrected in V34.014, V35.013, V36.011 and later
• Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible.
• Users who do not use Automatic Policy Deployment (APD) should block mDNS port, 5353 to help prevent communication.
• Enable CIP Security. CIP Security with Rockwell Automation Products Application Technique
• Security Best Practices
• For more information, see Rockwell Automation's security advisory

Affected Vendors

Affected Products (6)

Affected Sectors

Critical Manufacturing