Rockwell Automation ControlLogix 5580 Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Rockwell Automation ControlLogix 5580 controller, specifically in version 35.013. This issue arises because the controller continuously tries to forward messages, which can lead to a major nonrecoverable fault, causing the controller to fail and not recover properly.

Impact

Exploitation of this vulnerability can cause a significant nonrecoverable fault on the affected controller, leading to a major failure that cannot be recovered from.

Remediation

Users can upgrade to version 35.014 or later to address this vulnerability. For those unable to upgrade, Rockwell Automation recommends following their security best practices.