CVE-2024-21916: Rockwell Automation Denial-of-service Vulnerability in ICE1 Controller

Published Jan 31, 2024
·
Updated

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault (MNRF). The device will restart itself to recover from the MNRF.

Affected Software

6 affected components
All of the following
rockwellautomation Controllogix 5570 Controller Firmware=20.011
rockwellautomation Controllogix 5570 Controller
All of the following
rockwellautomation Guardlogix 5570 Controller Firmware=20.011
rockwellautomation Guardlogix 5570 Controller
All of the following
rockwellautomation Controllogix 5570 Redundant Controller Firmware=20.054_kit1
rockwellautomation Controllogix 5570 Redundant Controller

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Rockwell Automation ControlLogix 5570 / GuardLogix 5570 firmware to a version that resolves this vulnerability.

    Fixed in 20.011
  2. Upgrade

    Upgrade Rockwell Automation ControlLogix 5570 / GuardLogix 5570 firmware to a version that resolves this vulnerability.

    Fixed in 20.054_kit1
  3. Upgrade

    Upgrade Rockwell Automation ControlLogix 5570 / GuardLogix 5570 firmware to a version that resolves this vulnerability.

    Fixed in v33.016
  4. Upgrade

    Upgrade Rockwell Automation ControlLogix 5570 / GuardLogix 5570 firmware to a version that resolves this vulnerability.

    Fixed in v33.053_kit1

Event History

Jan 31, 2024
CVE Published
via MITRE·06:28 PM
Data Sourced
via MITRE·06:28 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-21916?

CVE-2024-21916 is classified as a denial-of-service vulnerability with the potential for significant impact due to major nonrecoverable faults.

2

How do I fix CVE-2024-21916?

To mitigate CVE-2024-21916, it is advised to update the firmware of affected Rockwell Automation ControlLogix and GuardLogix controllers.

3

Which devices are affected by CVE-2024-21916?

CVE-2024-21916 affects specific Rockwell Automation ControlLogix and GuardLogix controllers running firmware versions 20.011 and 20.054_kit1.

4

What could happen if CVE-2024-21916 is exploited?

Exploitation of CVE-2024-21916 could lead to major nonrecoverable faults, causing the device to restart and potentially disrupting operations.

5

Who should be concerned about CVE-2024-21916?

Users and administrators of Rockwell Automation ControlLogix and GuardLogix controllers should pay attention to CVE-2024-21916 due to its potential impact on system reliability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203