CVE-2024-3493: Rockwellautomation 1756-EN4TR Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.

Affected products

• Rockwellautomation 1756-EN4TR Firmware: version 5.001 only
• Rockwellautomation Compact Guardlogix 5380 Firmware: version 35.011 only
• Rockwellautomation Compactlogix 5380 Firmware: version 35.011 only
• Rockwellautomation Compactlogix 5380 Process Firmware: version 35.011 only
• Rockwellautomation Compactlogix 5480 Firmware: version 35.011 only
• Rockwellautomation Controllogix 5580 Firmware: version 35.011 only
• Rockwellautomation Controllogix 5580 Process Firmware: version 35.011 only
• Rockwellautomation Guardlogix 5580 Firmware: version 35.011 only

Published 2024-04-15. Last modified 2026-06-17.