Rockwell Automation GuardLogix 5380 and 5580 Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Rockwell Automation's GuardLogix 5380 SIL3 and GuardLogix 5580 products, specifically in version 33.011. This vulnerability allows a remote, non-privileged user to send malicious requests that cause a major, non-recoverable fault, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a major, non-recoverable fault, resulting in a denial-of-service condition on the affected system.

Remediation

Users are advised to update to versions 33.017, 34.014, 35.013, 36.011 or later. Additionally, access to the task object should be restricted via CIP Security and Hard Run. For more information on mitigating security risks in industrial automation control systems, consult Rockwell Automation's security best practices.