CVE-2024-40619

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

CVE-2024-40619 IMPACT

A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-754

Affected software

Vendor	Product	Versions
Rockwell Automation	ControlLogix® 5580	34.011
Rockwell Automation	GuardLogix 5580	34.011
rockwellautomation	controllogix_5580_firmware	34.011
rockwellautomation	guardlogix_5580_firmware	34.011

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201690.htmlVendor Advisory

Timeline

Published: Aug 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-40623.7A vulnerability was found in Hualai Xiaofang iSC5 3.2.2_112 and classified as problematic. Affected by this issue is some unknown functional CVE-2024-406207.5CVE-2024-40620 IMPACT A vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability CVE-2024-406249.8TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In `torrentpier/library/includes/functions.php`, `ge CVE-2024-406254.9GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspaces/{workspaceName}/co CVE-2024-406265.4Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to CVE-2024-406275.8Fastapi OPA is an opensource fastapi middleware which includes auth flow. HTTP `OPTIONS` requests are always allowed by `OpaMiddleware`, eve CVE-2024-406289.1JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to S CVE-2024-406299.8JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to S CVE-2024-40633.7A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classified as problematic. This affects an unknown part of CVE-2024-406304.3OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a forma CVE-2024-406318.1Plate media is an open source, rich-text editor for React. Editors that use `MediaEmbedElement` and pass custom `urlParsers` to the `useMedi CVE-2024-406323.7Linkerd is an open source, ultralight, security-first service mesh for Kubernetes. In affected versions when the application being run by li