Vulnerability in Rockwell Automation 1756-En2f
CVE-2024-6242
A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.
Published · last modified .
EPSS exploit prediction
EPSS: 0.111 (95.8th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 95.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.095 · newest: 0.111 · change: +0.016
Affected products
- Rockwell Automation 1756-En2f — versions v5.007(unsigned)/v5.027(signed), 1756-EN2F/C: V10.009
- Rockwell Automation 1756-En2t — versions v5.007(unsigned)/v5.027(signed), 1756-EN2T/D: V10.006
- Rockwell Automation 1756-En2tp — versions 1756-EN2TP/A: V10.020
- Rockwell Automation 1756-En2tr — versions v5.007(unsigned)/v5.027(signed), 1756-EN2TR/C: V10.007
- Rockwell Automation 1756-En3tr — versions v5.007(unsigned)/v5.027(signed), 1756-EN3TR/B: V10.007
- Rockwell Automation 1756-En4tr — versions V2
- Rockwell Automation Controllogix® 5580 (1756-L8z) — versions V28
- Rockwell Automation Guardlogix® 5580 (1756-L8zs) — versions V31
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-6242?
- CVE-2024-6242 is a vulnerability in Rockwell Automation 1756-En2f, classified under Unprotected Alternate Channel. Published 2024-08-01.
- Is CVE-2024-6242 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.