CVE-2025-24478

5380/5580 Denial-of-Service Vulnerability

State: Published
Severity: 7.1 High
Published: Jan 28, 2025
Updated: Feb 6, 2025
Reserved: Jan 21, 2025

Description

A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service.

Scores

CVSS	Score	Vector	Source
4.0	7.1 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N	Rockwell

Weaknesses

CWE-755 Improper Handling of Exceptional Conditions

Affected Products

Product	Versions
GuardLogix 5580 SIL 3Rockwell Automation	33.011Affected 33.012Affected 33.015Affected 34.011Affected 35.011Affected
Compact GuardLogix 5380 SIL 3Rockwell Automation	33.011Affected 33.012Affected 33.015Affected 34.011Affected 35.011Affected

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1718.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.