High severity7.5NVD Advisory· Published Sep 12, 2024· Updated Jun 17, 2026

CVE-2024-6077

Description

A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.

Affected products

Rockwellautomation/CIP Security Objectllm-create
Rockwellautomation/1756-EN4TRcpe-rescue
Range: v2.001
Rockwellautomation/Compact GuardLogix 5370cpe-rescue2 versions
v.32.013+ 1 more
- (no CPE)range: v.32.013
- (no CPE)range: v.32.011
Rockwellautomation/Compactlogix Controllerscpe-rescue3 versions
v.32 .011+ 2 more
- (no CPE)range: v.32 .011
- (no CPE)range: v.33.011
- (no CPE)range: v.32.011
Rockwellautomation/Controllogixcpe-rescue
Range: v.32.011
Rockwellautomation/ControlLogix 5580cpe-rescue
Range: v.33.011
Rockwellautomation/Guardlogixcpe-rescue
Range: v.32.011

Patches

Vulnerability mechanics

References

www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1963.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000