Strix
26.1K

CVE-2024-3493

HIGHCVSS 7.5/10EPSS 0.64%

Last modified

CVE-2024-3493 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. EPSS estimates a 0.64% chance of exploitation in the next 30 days.

Description

A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
0.64%

45.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
RockwellautomationControllogix 5580 Firmware35.011
RockwellautomationGuardlogix 5580 Firmware35.011
RockwellautomationCompactlogix 5380 Firmware35.011
RockwellautomationCompact Guardlogix 5380 Firmware35.011
Rockwellautomation1756-En4tr Firmware5.001
RockwellautomationControllogix 5580 Process Firmware35.011
RockwellautomationCompactlogix 5380 Process Firmware35.011
RockwellautomationCompactlogix 5480 Firmware35.011

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2024-3493?
A specific malformed fragmented packet type (fragmented packets may be generated automatically by devices that send large amounts of data) can cause a major nonrecoverable fault (MNRF) Rockwell Automation's ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. If exploited, the affected product will become unavailable and require a manual restart to recover it. Additionally, an MNRF could result in a loss of view and/or control of connected devices.
How severe is CVE-2024-3493?
CVE-2024-3493 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.64% probability of exploitation in the next 30 days.
How do I fix CVE-2024-3493?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-3493?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST