Loading

ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation

Severity:
High
Advisory ID:
SD1686
發佈日期:
August 13, 2024
最近更新:
November 19, 2024
Revision Number:
1.0
Known Exploited Vulnerability (KEV):
否
Corrected:
是
Workaround:
是
CVE IDs
CVE-2024-7515
下載
The following link(s) provide the security advisory in Vulnerability Exploitability Exchange format:
JSON
摘要
ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation

Published Date: August 13, 2024 
Last updated: September 13, 2024

Revision Number: 2.0

September 13, 2024 - Updated Affected Product and Solutions Table

CVSS Score: v3.1 8.6/10, v4.0 8.7/10

The security of our products is important to us as your chosen industrial automation supplier. This anomaly was found internally during routine testing and is being reported based on our commitment to customer transparency and to improving your business or production environments.

AFFECTED PRODUCTS AND SOLUTION

Affected Product First Known in firmware revision Corrected in firmware revision

CompactLogix 5380

v28.011

v34.014, v35.013, v36.011 and later

ControlLogix 5580

v28.011

v34.014, v35.013, v36.011 and later

GuardLogix 5580

v31.011

v34.014, v35.013, v36.011 and later

Compact GuardLogix 5380 SIL2

v31.011

v34.014, v35.013, v36.011 and later

Compact GuardLogix 5380 SIL3

V32.013

v34.014, v35.013, v36.011 and later

CompactLogix 5480 

V32.011

v34.014, v35.013, v36.011 and later

Mitigations and Workarounds 
Customers using the affected software are encouraged to apply the following risk mitigations, if possible:

  • If PTP messages are not used, block at the network level, port UDP 319/320

  • For information on how to mitigate Security Risks on industrial automation control systems, we encourage customers to implement our suggested security best practices to minimize the risk of the vulnerability.

VULNERABILITY DETAILS

Rockwell Automation used the latest version of the CVSS scoring system to assess the following vulnerabilities.

CVE-2024-7515 IMPACT

A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.

CVSS 3.1 Base Score: 8.6 
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CVSS 4.0 Base Score: 8.7 
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CWE-20:  Improper Input Validation

Known Exploited Vulnerability (KEV) database: None

Customers can use Stakeholder-Specific Vulnerability Categorization to generate more environment-specific prioritization. 

ADDITIONAL RESOURCES

The following link provides CVE information in Vulnerability Exploitability Exchange (VEX) format, which is machine readable and can be used to automate vulnerability management and tracking activities.  

  • JSON CVE-2024-7515

Rockwell Automation Home
Copyright ©2022 Rockwell Automation, Inc.
  1. Chevron LeftChevron Left Rockwell Automation 首頁 Chevron RightChevron Right
  2. Chevron LeftChevron Left Trust Center Chevron RightChevron Right
  3. Chevron LeftChevron Left Industrial Security Adv Chevron RightChevron Right
  4. Chevron LeftChevron Left Industrial Security Advisory Detail Chevron RightChevron Right
請更新您的 cookie 設定以繼續.
此功能需要 cookie 來改善您的體驗。請更新您的設定以允許這些 cookie:
  • 社群媒體Cookie
  • 功能Cookie
  • 性能Cookie
  • 行銷Cookie
  • 全部Cookie
您可以隨時更新您的設定。想了解更多訊息,請參閱我們的 {0} 隱私政策
CloseClose