Vulnerability in Rockwell Automation 1756-En2f
CVE-2024-6242
A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.
EPSS: 0.092 (94.9th percentile) — read the EPSS interpretation.
Affected products
- Rockwell Automation 1756-en2f — versions v5.007(unsigned)/v5.027(signed), 1756-EN2F/C: V10.009
- Rockwell Automation 1756-en2t — versions v5.007(unsigned)/v5.027(signed), 1756-EN2T/D: V10.006
- Rockwell Automation 1756-en2tp — versions 1756-EN2TP/A: V10.020
- Rockwell Automation 1756-en2tr — versions v5.007(unsigned)/v5.027(signed), 1756-EN2TR/C: V10.007
- Rockwell Automation 1756-en3tr — versions v5.007(unsigned)/v5.027(signed), 1756-EN3TR/B: V10.007
- Rockwell Automation 1756-en4tr — versions V2
- Rockwell Automation Controllogix® 5580 (1756-l8z) — versions V28
- Rockwell Automation Guardlogix® 5580 (1756-l8zs) — versions V31
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-6242?
- CVE-2024-6242 is a vulnerability in Rockwell Automation 1756-En2f, classified under Unprotected Alternate Channel. Published 2024-08-01.
- Is CVE-2024-6242 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.