Rockwellautomation Controllogix 5580 Process Firmware vulnerabilities

2 CVEs affecting Rockwellautomation Controllogix 5580 Process Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6207, published 2024-10-14.

More from Rockwellautomation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-3493, published 2024-04-15. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell…
• CVE-2024-6207, published 2024-10-14. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor…