Rockwell Automation ControlLogix 5580

A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.

Published: 2025-09-09T12:36:15.177Z
Updated: 2025-09-09T13:07:58.099Z

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

Published: 2024-10-08T16:35:04.513Z
Updated: 2024-10-08T17:36:25.719Z

CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.

Published: 2024-08-14T19:40:20.990Z
Updated: 2024-08-14T19:59:57.056Z

CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller.

Published: 2024-08-14T19:35:55.326Z
Updated: 2024-08-15T14:37:58.421Z

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.

Published: 2024-10-14T20:53:49.191Z
Updated: 2024-10-15T14:43:19.768Z