Rockwell Automation CompactLogix 5480 Code Execution Vulnerability

A code execution vulnerability exists in the Rockwell Automation CompactLogix 5480 controller, specifically in versions 32 through 37.011 with the Windows package 2.1.0, Win10 v1607. This vulnerability allows an attacker with physical access to exploit the maintenance menu of the controller using a crafted payload, leading to arbitrary code execution.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected controller.

Remediation

Best security practices should be applied. Consult the Rockwell Automation security best practices and system security design guidelines for more information.