Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2024-5659 Details
Description
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 15, 2024Exploitation: NoneAutomatable: YesTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1673.html | CVE | Vendor Advisory |
| https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1673.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-670 | Always-Incorrect Control Flow Implementation | [email protected] |
| CWE-670 | Always-Incorrect Control Flow Implementation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| rockwellautomation controllogix 5580 firmware | 34.011 |
CPE
Remediation
| |
| rockwellautomation controllogix 5580 | All versions |
CPE
Remediation
| |
| rockwellautomation guardlogix 5580 firmware | 34.011 |
CPE
Remediation
| |
| rockwellautomation guardlogix 5580 | All versions |
CPE
Remediation
| |
| rockwellautomation 1756-en4 firmware | 4.001 |
CPE
Remediation
| |
| rockwellautomation 1756-en4 | All versions |
CPE
Remediation
| |
| rockwellautomation compactlogix 5380 firmware | 34.011 |
CPE
Remediation
| |
| rockwellautomation compactlogix 5380 | All versions |
CPE
Remediation
| |
| rockwellautomation compact guardlogix 5380 firmware | 34.011 |
CPE
Remediation
| |
| rockwellautomation compact guardlogix 5380 | All versions |
CPE
Remediation
| |
| rockwellautomation compactlogix 5480 firmware | 34.011 |
CPE
Remediation
| |
| rockwellautomation compactlogix 5480 | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 3, 2025 | Initial Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Jun 14, 2024 | New CVE Received | [email protected] |