Major Nonrecoverable Fault (MNRF) in Rockwell Automation's ControlLogix 5580 Could Lead to Loss of View and Control of Connected Devices

CVE-2024-3493

Summary

The vulnerability arises from the handling of malformed fragmented packets, which are typically generated by devices transmitting large volumes of data. This issue can trigger a major nonrecoverable fault (MNRF) in several Rockwell Automation products including the ControlLogix 5580, Guard Logix 5580, CompactLogix 5380, and 1756-EN4TR. When the vulnerability is exploited, the affected device will become unavailable and necessitate a manual restart for recovery. Furthermore, an MNRF event can lead to a detrimental loss of visibility and control over connected devices, impacting overall operational functionality.

References