Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Module

A vulnerability exists in Rockwell Automation's CompactLogix, ControlLogix, and GuardLogix communication modules (specifically the 1756-EN4TR module) due to improper certificate revocation handling. An attacker could exploit this to establish a connection using a revoked certificate, bypassing CIP Security protections. Rockwell Automation recommends updating to version V38.011 for CompactLogix 5380, ControlLogix 5580, GuardLogix 5580 and Compact GuardLogix 5380, and V8.001 for 1756-EN4TR. This impacts critical infrastructure sectors, particularly critical manufacturing, and requires immediate action to mitigate the risk of exploitation.