vulnerability
Rockwell Automation CompactLogix
Medium
Summary
Rockwell Automation has issued a security advisory regarding vulnerabilities in its CompactLogix 5370 L1, L2, and L3 controllers. These vulnerabilities, stemming from improper validation of sequence numbers and source IP addresses within the CIP protocol, allow for denial-of-service attacks by exploiting exposed Connection IDs on the web interface. Updating to version V38.011 is recommended to mitigate the risk of unauthorized access and subsequent DoS attacks.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data