Machine-generated analysis · WAYSCloud LLM
The advisory states that exposed Connection IDs on the web interface can be abused to trigger a denial-of-service condition via improper validation of CIP protocol fields.
Context
Rockwell Automation CompactLogix is a programmable logic controller used in industrial automation systems. The advisory identifies two vulnerabilities involving improper validation of sequence numbers and source IP addresses in the CIP protocol, which could lead to denial-of-service conditions. The affected products are CompactLogix 5370 L1, L2, and L3 models running firmware versions below V38.011. The advisory explicitly notes the exposure of sensitive system information and the potential for unauthorized control sphere access.
Operator considerations
- Check: Inventory CompactLogix 5370 L1, L2, and L3 controllers running firmware versions below V38.011
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
Read the full advisory on CISA →