CVE-2017-6024
Medium
Description
A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause a denial of service condition by sending a series of specific CIP-based commands to the controller.
SeverityMedium
CVSS5.9
Exploit probability—
ProductRockwellautomation Compactlogix 5380 Firmware
PublishedMay 6, 2017
First seenMay 6, 2017
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rockwellautomation compactlogix_5380_firmware | v28.011, v29.011 | — |
| rockwellautomation controllogix_5580_firmware | v28.011, v28.012, v28.013, v29.011 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.