Compactlogix 5380

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:rockwell_automation:compactlogix_5380:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545)
ProductCompactlogix 5380 (438b727a-fbd5-5d20-b3c5-edef20065c88)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6207 vulnerable 2026-06-08 06:58:18.195502 Details available
HIGH (7.5)
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.
Published: 2024-10-14T20:53:49.191Z
Updated: 2024-10-15T14:43:19.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6077 vulnerable 2026-06-08 06:58:17.675900 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Vulnerable to DoS vulnerability via CIP
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.
Published: 2024-09-12T19:59:40.368Z
Updated: 2024-09-12T21:01:50.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5659 vulnerable 2026-06-08 06:56:16.900181 Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
Published: 2024-06-14T16:42:20.699Z
Updated: 2024-08-01T21:18:06.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3493 vulnerable 2026-06-08 06:41:53.405707 Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value
HIGH (8.6)
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.
Published: 2024-04-15T21:17:36.077Z
Updated: 2024-08-12T15:16:08.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3752 vulnerable 2026-06-08 05:48:22.271181 Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack
HIGH (8.6)
An unauthorized user could use a specially crafted sequence of Ethernet/IP messages, combined with heavy traffic loading to cause a denial-of-service condition in Rockwell Automation Logix controllers resulting in a major non-recoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online and continue normal operation.
Published: 2022-12-19T22:23:36.836Z
Updated: 2025-04-16T14:28:03.254Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.