Read the docs
TI-2024-08002 Aliases CVE-2024-8626GHSA-mf2q-g3w5-qq7r

Logix Controllers Vulnerable to Denial-of-Service Vulnerability

Priority MEDIUM 44CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00521 44th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellCompactLogix 5380 controllersv33.011 <—No fix listedCNA
RockwellCompact GuardLogix® 5380 controllersv33.011<—No fix listedCNA
RockwellCompactLogix 5480 controllersv33.011<—No fix listedCNA
RockwellGuardLogix 5580 controllersv33.011<—No fix listedCNA
Rockwell1756-EN4TRv3.002—No fix listedCNA
  • CompactLogix 5380 controllers VendorRockwell Affected v33.011 < Fixed in — No fix listed CNA
  • Compact GuardLogix® 5380 controllers VendorRockwell Affected v33.011< Fixed in — No fix listed CNA
  • CompactLogix 5480 controllers VendorRockwell Affected v33.011< Fixed in — No fix listed CNA
  • GuardLogix 5580 controllers VendorRockwell Affected v33.011< Fixed in — No fix listed CNA
  • 1756-EN4TR VendorRockwell Affected v3.002 Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:*:*:*:*:*:*:*:*33.011 to before 33.015VulnerableRockwell
cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:*:*:*:*:*:*:*:*33.011 to before 33.015VulnerableRockwell
cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:*:*:*:*:*:*:*:*33.011 to before 33.015VulnerableRockwell
cpe:2.3:h:rockwellautomation:compactlogix_5480:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:*:*:*:*:*:*:*:*33.011 to before 33.015VulnerableRockwell
cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:*:*:*:*:*:*:*:*33.011 to before 33.015VulnerableRockwell
cpe:2.3:h:rockwellautomation:guardlogix_5580:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
  • cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:*:*:*:*:*:*:*:* Versions 33.011 to before 33.015 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:*:*:*:*:*:*:*:* Versions 33.011 to before 33.015 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:*:*:*:*:*:*:*:* Versions 33.011 to before 33.015 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:compactlogix_5480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:*:*:*:*:*:*:*:* Versions 33.011 to before 33.015 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
  • cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:*:*:*:*:*:*:*:* Versions 33.011 to before 33.015 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:guardlogix_5580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:rockwellautomation:1756-en4tr_firmware:3.002:*:*:*:*:*:*:*3.002VulnerableRockwell
cpe:2.3:h:rockwellautomation:1756-en4tr:-:*:*:*:*:*:*:*not specified by NVDRunning onRockwell
  • cpe:2.3:o:rockwellautomation:1756-en4tr_firmware:3.002:*:*:*:*:*:*:* Versions 3.002 Vulnerable ·Rockwell
  • cpe:2.3:h:rockwellautomation:1756-en4tr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-8626
  2. 2026-10-03 Alias added: GHSA-mf2q-g3w5-qq7r

References

Advisory 1

  • TI-2023-03356 Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service CVSS 3.1HIGH 7.5
  • TI-2024-03258 Rockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header Value CVSS 3.1HIGH 8.6
  • TI-2025-07328 Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability CVSS 4.0HIGH 7.1
  • TI-2025-07327 Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability CVSS 4.0HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences