Rockwell Automation Compact GuardLogix 5370 Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Rockwell Automation Compact GuardLogix 5370 controller, specifically in versions through 30.012. The issue arises when a crafted CIP unconnected explicit message is sent, leading to a major non-recoverable fault that disrupts the controller's normal functioning.

Impact

Exploitation of this vulnerability causes a major non-recoverable fault, disrupting the normal operation of the affected controller and preventing it from recovering or functioning properly.

Remediation

Users can upgrade to version 30.14 or later to address this vulnerability. For those unable to upgrade, Rockwell Automation recommends following their security best practices.