Approved changes feed: RSS · Atom

cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil_3_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorRockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba)
ProductCompact Guardlogix 5380 Sil 3 Firmware (04b8d59c-2832-579b-a04a-af01b52fe48c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7515 vulnerable 2026-06-08 06:58:22.354060 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation
CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.
Published: 2024-08-14T19:40:20.990Z
Updated: 2024-08-14T19:59:57.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7507 vulnerable 2026-06-08 06:58:22.330219 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation
CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller.
Published: 2024-08-14T19:35:55.326Z
Updated: 2024-08-15T14:37:58.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6207 vulnerable 2026-06-08 06:58:18.202807 Details available
HIGH (7.5)
CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.
Published: 2024-10-14T20:53:49.191Z
Updated: 2024-10-15T14:43:19.768Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.