CVE-2024-6242CWE-420

Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices

High · published August 1, 2024

CVSS v4.0
7.3
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
EPSS
0.11100 · 95.9th percentile
Weakness
CWE-420 · Unprotected Alternate Channel
Published
2024-08-01T15:15Z
EPSS history
Timeline
  • 01 AUG 15:15Z
    Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices
    cvelistv5