Controllogix® 5580

A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller.

Published: 2025-09-09T12:36:15.177Z
Updated: 2025-09-09T13:07:58.099Z

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.

Published: 2024-10-14T20:53:49.191Z
Updated: 2024-10-15T14:43:19.768Z

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.

Published: 2024-09-12T19:59:40.368Z
Updated: 2024-09-12T21:01:50.254Z

Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.

Published: 2024-06-14T16:42:20.699Z
Updated: 2024-08-01T21:18:06.865Z

CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.

Published: 2024-08-14T19:52:24.833Z
Updated: 2024-08-19T18:09:56.543Z