CVE-2024-6207
HIGHDescription
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.
Is your site exposed to CVE-2024-6207?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| rockwellautomation | controllogix_5580_firmware |
| rockwellautomation | controllogix_5580_firmware |
| rockwellautomation | controllogix_5580_firmware |
| rockwellautomation | controllogix_5580 |
| rockwellautomation | controllogix_5580_process_firmware |
| rockwellautomation | controllogix_5580_process_firmware |
| rockwellautomation | controllogix_5580_process_firmware |
| rockwellautomation | controllogix_5580_process |
| rockwellautomation | guardlogix_5580_firmware |
| rockwellautomation | guardlogix_5580_firmware |
| rockwellautomation | guardlogix_5580_firmware |
| rockwellautomation | guardlogix_5580 |
| rockwellautomation | compactlogix_5380_firmware |
| rockwellautomation | compactlogix_5380_firmware |
| rockwellautomation | compactlogix_5380_firmware |
| rockwellautomation | compactlogix_5380 |
| rockwellautomation | compact_guardlogix_5380_sil_2_firmware |
| rockwellautomation | compact_guardlogix_5380_sil_2_firmware |
| rockwellautomation | compact_guardlogix_5380_sil_2_firmware |
| rockwellautomation | compact_guardlogix_5380_sil_2 |
| rockwellautomation | compact_guardlogix_5380_sil_3_firmware |
| rockwellautomation | compact_guardlogix_5380_sil_3_firmware |
| rockwellautomation | compact_guardlogix_5380_sil_3_firmware |
| rockwellautomation | compact_guardlogix_5380_sil_3 |
| rockwellautomation | compactlogix_5480_firmware |
| rockwellautomation | compactlogix_5480_firmware |
| rockwellautomation | compactlogix_5480_firmware |
| rockwellautomation | compactlogix_5480 |
| rockwellautomation | factorytalk_logix_echo_firmware |
| rockwellautomation | factorytalk_logix_echo_firmware |
| rockwellautomation | factorytalk_logix_echo |
References
Frequently Asked Questions
What is CVE-2024-6207? +
How severe is CVE-2024-6207? +
What products are affected by CVE-2024-6207? +
How do I check if I'm vulnerable to CVE-2024-6207? +
Related Vulnerabilities
Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is …
Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in …
A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted …
A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to …
n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail …
A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured …