CVE-2024-6077
Estado: AnalizadaAlta (8.7)—
A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover.
CVSS
- Versión: 4.0
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Puntuación base: 8.7
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.56%
- Percentil entre todas las CVEs puntuadas: 45
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (7)
Rockwellautomation — 1756-en4 FirmwareRockwellautomation — Compact Guardlogix 5380 SIL 2 FirmwareRockwellautomation — Compact Guardlogix 5380 SIL 3 FirmwareRockwellautomation — Compactlogix 5380 FirmwareRockwellautomation — Compactlogix 5480 FirmwareRockwellautomation — Controllogix 5580 FirmwareRockwellautomation — Guardlogix 5580 Firmware
CWE
- CWE-20
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-6077",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-6077",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-09-12T20:22:58.224200Z"
}
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "PSIRT@rockwellautomation.com",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "NOT_DEFINED",
"baseScore": 8.7,
"Automatable": "NOT_DEFINED",
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"exploitMaturity": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"subIntegrityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "PSIRT@rockwellautomation.com",
"affectedData": [
{
"vendor": "Rockwell Automation",
"product": "CompactLogix 5380",
"versions": [
{
"status": "affected",
"version": "v.32 .011"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Rockwell Automation",
"product": "CompactLogix 5380 Process",
"versions": [
{
"status": "affected",
"version": "v.33.011"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Rockwell Automation",
"product": "Compact GuardLogix 5380 SIL 2",
"versions": [
{
"status": "affected",
"version": "v.32.013"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Rockwell Automation",
"product": "Compact GuardLogix 5380 SIL 3",
"versions": [
{
"status": "affected",
"version": "v.32.011"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Rockwell Automation",
"product": "CompactLogix 5480",
"versions": [
{
"status": "affected",
"version": "v.32.011"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Rockwell Automation",
"product": "ControlLogix® 5580",
"versions": [
{
"status": "affected",
"version": "v.32.011"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Rockwell Automation",
"product": "ControlLogix® 5580 Process",
"versions": [
{
"status": "affected",
"version": "v.33.011"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Rockwell Automation",
"product": "GuardLogix 5580",
"versions": [
{
"status": "affected",
"version": "v.32.011"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Rockwell Automation",
"product": "1756-EN4",
"versions": [
{
"status": "affected",
"version": "v2.001"
}
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil3_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "rockwellautomation",
"product": "compactlogix_5480_firmware",
"versions": [
{
"status": "affected",
"version": "32 .011",
"lessThan": "33.017",
"versionType": "custom"
},
{
"status": "affected",
"version": "34.0",
"lessThan": "34.014",
"versionType": "custom"
},
{
"status": "affected",
"version": "35.0",
"lessThan": "35.013",
"versionType": "custom"
},
{
"status": "affected",
"version": "36.0",
"lessThan": "36.011",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:o:rockwellautomation:controllogix_5580_process_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:rockwellautomation:compactlogix_5380_process_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "rockwellautomation",
"product": "compactlogix_5380_process_firmware",
"versions": [
{
"status": "affected",
"version": "33.011",
"lessThan": "33.017",
"versionType": "custom"
},
{
"status": "affected",
"version": "34.0",
"lessThan": "34.014",
"versionType": "custom"
},
{
"status": "affected",
"version": "35.0",
"lessThan": "35.013",
"versionType": "custom"
},
{
"status": "affected",
"version": "36.0",
"lessThan": "36.011",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil2_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "rockwellautomation",
"product": "compact_guardlogix_5380_sil2_firmware",
"versions": [
{
"status": "affected",
"version": "32.013",
"lessThan": "33.017",
"versionType": "custom"
},
{
"status": "affected",
"version": "34.0",
"lessThan": "34.014",
"versionType": "custom"
},
{
"status": "affected",
"version": "35.0",
"lessThan": "35.013",
"versionType": "custom"
},
{
"status": "affected",
"version": "36.0",
"lessThan": "36.011",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:2.3:o:rockwellautomation:1756-en4_firmware:*:*:*:*:*:*:*:*"
],
"vendor": "rockwellautomation",
"product": "1756-en4_firmware",
"versions": [
{
"status": "affected",
"version": "2.001",
"lessThan": "6.001",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2024-09-12T20:15:05.440",
"references": [
{
"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1963.html",
"tags": [
"Vendor Advisory"
],
"source": "PSIRT@rockwellautomation.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "PSIRT@rockwellautomation.com",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailable and require a factory reset to recover."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad de denegación de servicio en los productos afectados de Rockwell Automation cuando se envían paquetes especialmente manipulados al objeto de seguridad CIP. Si se explota, el dispositivo dejará de estar disponible y será necesario restablecer la configuración de fábrica para recuperarse."
}
],
"lastModified": "2026-06-17T08:17:14.467",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:32.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D389E07F-A04E-467A-8FE4-4DE8B69EF7EC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EDD040ED-B44C-47D0-B4D4-729C378C4F68"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil_2_firmware:32.013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCF40770-68D8-41E8-B0DC-61BEFD2DA987"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:compact_guardlogix_5380_sil_2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E594CDF6-0582-4D5C-B6AA-C8A2E752E29F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil_3_firmware:32.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F2345A8-E3BD-45C2-AEE8-189C81D6C23F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:compact_guardlogix_5380_sil_3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B82D842C-0930-41AA-83CD-5F235771AE4B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:32.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7EB2F5A-34D4-49C6-9B58-632DFA6B69E4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:compactlogix_5480:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "80F4F5BE-07DF-402A-BF98-34FBA6A11968"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:33.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F032C078-D896-47EC-8393-10803E832C18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "51BB883B-B863-4D57-B1C0-FC7B3EBD1EA0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:32.011:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAE872BB-FC1F-4B70-92AD-B1213A347C89"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:guardlogix_5580:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "006B7683-9FDF-4748-BA28-2EA22613E092"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:rockwellautomation:1756-en4_firmware:2.001:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B389BA8B-56CD-4614-BC77-02FC80981FA1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:1756-en4:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6935642C-4CBF-4B4F-A509-561B3E39A66B"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "PSIRT@rockwellautomation.com"
}