CVE-2024-21916

HIGH

Rockwell Automation ControlLogix and GuardLogix - Denial of Service

Title source: llm

Description

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault (MNRF). The device will restart itself to recover from the MNRF.

References (1)

Core 1

Core References

Vendor Advisory

https://www.rockwellautomation.com/en-us/support/advisory.SD1661.html

Scores

CVSS v3 8.6

EPSS 0.0044

EPSS Percentile 63.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-119

Status published

Products (3)

rockwellautomation/controllogix_5570_controller_firmware 20.011

rockwellautomation/controllogix_5570_redundant_controller_firmware 20.054_kit1

rockwellautomation/guardlogix_5570_controller_firmware 20.011

Published Jan 31, 2024

Tracked Since Feb 18, 2026