Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices
A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ControlLogix® 5580 (1756-L8z)
Vendor
Rockwell Automation
Product
ControlLogix® 5580 (1756-L8z)
Platforms
Unknown
Default status
unaffected
ControlLogix® 5580 (1756-L8z) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
V28
affected
Unavailable
Unavailable
Unavailable
None listed
GuardLogix® 5580 (1756-L8zS)
Vendor
Rockwell Automation
Product
GuardLogix® 5580 (1756-L8zS)
Platforms
Unknown
Default status
unaffected
GuardLogix® 5580 (1756-L8zS) · Scoped product and version facts