CVE-2024-21916: Rockwellautomation Controllogix 5570 Controller Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault (MNRF). The device will restart itself to recover from the MNRF.

Affected products

• Rockwellautomation Controllogix 5570 Controller Firmware: version 20.011 only
• Rockwellautomation Controllogix 5570 Redundant Controller Firmware: version 20.054_kit1 only
• Rockwellautomation Guardlogix 5570 Controller Firmware: version 20.011 only

Published 2024-01-31. Last modified 2026-06-17.