Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
CISA advisory maps CVE-2021-42260 to Rockwell ControlLogix, CompactLogix, and GuardLogix controllers with firmware below per-series patch levels.
CISA published an ICS advisory associating CVE-2021-42260 with multiple Rockwell Automation controller families: ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380. Affected firmware versions fall below 34.015, 35.014, 36.013, and 37.011 depending on the series. The vendor provides updated firmware as remediation.
- CVE-2021-42260 affects multiple Logix controller families
- Per-series thresholds at 34.015, 35.014, 36.013, 37.011
- Vendor firmware updates available as remediation
- Deployed in critical manufacturing environments
- CVEs
- CVE-2021-42260
- Vendors
- Rockwell Automation
- Organizations
- CISARockwell Automation
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-42260 | TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case | 7.5 | 3% | PoC |
From the original article
View CSAF Summary The following versions of Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix are affected: ControlLogix 5580 <34. 015, <35. 014, <36.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.