Rockwell Automation Alert
2723Warning Date
Severity Level
Warning Number
Target Sector
28 February, 2021
● Critical
2021-2538
Other
Description:
Rockwell Automation has released a security clarification to address a vulnerability in the following products:
- Rockwell software:
- RSLogix 5000
- 16 - 20
- Studio 5000 Logix Designer
- Version 21 and later
- RSLogix 5000
- Rockwell Logix Controllers:
- CompactLogix 1768
- CompactLogix 1769
- CompactLogix 5370
- CompactLogix 5380
- CompactLogix 5480
- ControlLogix 5550
- ControlLogix 5560
- ControlLogix 5570
- ControlLogix 5580
- DriveLogix 5560
- DriveLogix 5730
- DriveLogix 1794-L34
- Compact GuardLogix 5370
- Compact GuardLogix 5380
- GuardLogix 5570
- GuardLogix 5580
- SoftLogix 5800
Threats:
Attacker could exploit this vulnerability by bypassing verification and authentication mechanisms.
Best practice and Recommendations:
Rockwell Automation recommends applying the best practices to mitigate the impact of the vulnerability by follow the below link: