ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
CISA Advisoriespublished ()ingested CISA

Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix

mediumAdvisoryimportance 28CVE-2021-42260
AI summary · glm-5.3-flash

CISA advisory maps CVE-2021-42260 to Rockwell ControlLogix, CompactLogix, and GuardLogix controllers with firmware below per-series patch levels.

CISA published an ICS advisory associating CVE-2021-42260 with multiple Rockwell Automation controller families: ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380. Affected firmware versions fall below 34.015, 35.014, 36.013, and 37.011 depending on the series. The vendor provides updated firmware as remediation.

  • CVE-2021-42260 affects multiple Logix controller families
  • Per-series thresholds at 34.015, 35.014, 36.013, 37.011
  • Vendor firmware updates available as remediation
  • Deployed in critical manufacturing environments
Read the original
VendorsRockwell Automation
ProductsControlLogixCompactLogixGuardLogix
OrganizationsCISARockwell Automation
CountriesUnited States
Tagsrockwell-automationcontrollogixcompactlogixguardlogixplcicscisa

Vulnerabilities mentionedAll →

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2021-42260
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case.

TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service.

NVD description · AI analysis pending		7.53% PoC
  • tinyxml project tinyxml
  • tinyxml project debian linux
—
Full article

View CSAF Summary The following versions of Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix are affected: ControlLogix 5580 <34.015, <35.014, <36.013, <37.011 (CVE-2021-42260, CVE-2021-42260, CVE-2021-42260, CVE-2021-42260) GuardLogix 5580 <34.015, <35.014, <36.013, <37.011 (CVE-2021-42260, CVE-2021-42260, CVE-2021-42260, CVE-2021-42260) CompactLogix 5380 <34.015, <35.014, <36.013, <37.011 (CVE-2021-42260, CVE-2021-42260, CVE-2021-42260, CVE-2021-42260) Compact GuardLogix 5380 <34.015, <35.014, <36.013, <37.011 (CVE-2021-42260, CVE-2021-42260, CVE-2021-42260, CVE-2021-42260) CompactLogix 5480 <34.015, <35.014, <36.013, <37.011…

This source does not provide full text. Read it at cisa.gov.