CVE-2024-6207

HIGH
Published Oct 14, 2024 Modified Oct 21, 2024 CWE-20

Description

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.

Is your site exposed to CVE-2024-6207?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-20 Improper Input Validation

Affected Products

Vendor Product
rockwellautomation controllogix_5580_firmware
rockwellautomation controllogix_5580_firmware
rockwellautomation controllogix_5580_firmware
rockwellautomation controllogix_5580
rockwellautomation controllogix_5580_process_firmware
rockwellautomation controllogix_5580_process_firmware
rockwellautomation controllogix_5580_process_firmware
rockwellautomation controllogix_5580_process
rockwellautomation guardlogix_5580_firmware
rockwellautomation guardlogix_5580_firmware
rockwellautomation guardlogix_5580_firmware
rockwellautomation guardlogix_5580
rockwellautomation compactlogix_5380_firmware
rockwellautomation compactlogix_5380_firmware
rockwellautomation compactlogix_5380_firmware
rockwellautomation compactlogix_5380
rockwellautomation compact_guardlogix_5380_sil_2_firmware
rockwellautomation compact_guardlogix_5380_sil_2_firmware
rockwellautomation compact_guardlogix_5380_sil_2_firmware
rockwellautomation compact_guardlogix_5380_sil_2
rockwellautomation compact_guardlogix_5380_sil_3_firmware
rockwellautomation compact_guardlogix_5380_sil_3_firmware
rockwellautomation compact_guardlogix_5380_sil_3_firmware
rockwellautomation compact_guardlogix_5380_sil_3
rockwellautomation compactlogix_5480_firmware
rockwellautomation compactlogix_5480_firmware
rockwellautomation compactlogix_5480_firmware
rockwellautomation compactlogix_5480
rockwellautomation factorytalk_logix_echo_firmware
rockwellautomation factorytalk_logix_echo_firmware
rockwellautomation factorytalk_logix_echo

References

Frequently Asked Questions

What is CVE-2024-6207? +
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running. It has a CVSS v3.1 base score of 7.5 (HIGH).
How severe is CVE-2024-6207? +
CVE-2024-6207 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-6207? +
CVE-2024-6207 affects products from rockwellautomation, specifically: compact_guardlogix_5380_sil_2, compact_guardlogix_5380_sil_2_firmware, compact_guardlogix_5380_sil_3, compact_guardlogix_5380_sil_3_firmware, compactlogix_5380, compactlogix_5380_firmware, compactlogix_5480, compactlogix_5480_firmware, controllogix_5580, controllogix_5580_firmware, controllogix_5580_process, controllogix_5580_process_firmware, factorytalk_logix_echo, factorytalk_logix_echo_firmware, guardlogix_5580, guardlogix_5580_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-6207? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-6207 — free, no signup required.