CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2024-3493
High (7.5) in rockwellautomation. EPSS 0.6% chance of exploitation in the next 30 days.
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- rockwellautomation:1756-en4tr_firmware
- rockwellautomation:compact_guardlogix_5380_firmware
- rockwellautomation:compactlogix_5380_firmware
- rockwellautomation:compactlogix_5380_process_firmware
- rockwellautomation:compactlogix_5480_firmware
- rockwellautomation:controllogix_5580_firmware
- rockwellautomation:controllogix_5580_process_firmware
- rockwellautomation:guardlogix_5580_firmware