As cited
Copy frozen at (site build).
vulnerabilities
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
Rockwell Automation released an advisory for a denial of service vulnerability (CVE-2021-42260) affecting ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, and Compact GuardLogix controllers. The vulnerability, triggered by maliciously crafted data, can cause a major nonrecoverable fault requiring a program download or reset to recover. Affected firmware versions are below 34.015, 35.014, 36.013, and 37.011 across multiple product lines deployed in critical manufacturing worldwide.
Why it matters: Organizations operating Rockwell Automation industrial control systems (ICS) in critical manufacturing must patch affected firmware versions immediately to prevent denial of service attacks that could disable critical production equipment.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
Rockwell Automation released an advisory for a denial of service vulnerability (CVE-2021-42260) affecting ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, and Compact GuardLogix controllers. The vulnerability, triggered by maliciously crafted data, can cause a major nonrecoverable fault requiring a program download or reset to recover. Affected firmware versions are below 34.015, 35.014, 36.013, and 37.011 across multiple product lines deployed in critical manufacturing worldwide.
Why it matters: Organizations operating Rockwell Automation industrial control systems (ICS) in critical manufacturing must patch affected firmware versions immediately to prevent denial of service attacks that could disable critical production equipment.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
Rockwell Automation released a security advisory for CVE-2021-42260, a denial of service vulnerability affecting multiple ControlLogix and GuardLogix product lines across firmware versions prior to 34.015, 35.014, 36.013, and 37.011. The vulnerability can be triggered via corrupted data and causes major nonrecoverable faults requiring program downloads or stage 2 resets to recover. Rockwell Automation recommends immediate firmware updates to patched versions.
Why it matters: Organizations operating ControlLogix, CompactLogix, GuardLogix, or Compact GuardLogix programmable logic controllers worldwide need to apply vendor firmware patches immediately to prevent denial of service attacks that could disable critical manufacturing infrastructure.
- Source published
- First seen by Cybersecurity Tracker