Denial-of-Service Vulnerability in Rockwell Automation Products
CVE-2025-24478

7.1HIGH

Key Information:

Vendor

Rockwell Automation
Status
Guardlogix 5580 Sil 3
Compact Guardlogix 5380 Sil 3
Vendor
CVE Published:
28 January 2025

What is CVE-2025-24478?

A denial-of-service vulnerability has been identified within Rockwell Automation products that allows remote, non-privileged users to exploit the system. By sending specially crafted requests, an attacker could trigger a nonrecoverable fault, rendering the affected system inoperable. This vulnerability poses significant risks to operational continuity, emphasizing the need for immediate remediation to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Compact GuardLogix 5380 SIL 3 33.011

Compact GuardLogix 5380 SIL 3 33.012

Compact GuardLogix 5380 SIL 3 33.015

References

https://www.rockwellautomation.com/en-us/trust-center/sec...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.