Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
Rockwell Automation industrial controllers vulnerable to denial of service via crafted data.
Rockwell Automation has identified a denial-of-service vulnerability (CVE-2021-42260) affecting multiple ControlLogix, CompactLogix, GuardLogix, and Compact GuardLogix products. Exploitation can lead to a major nonrecoverable fault, requiring a program download or stage 2 reset to recover. Rockwell Automation recommends updating firmware to specific versions to remediate.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Rockwell Automation?
Get an email when a new story names Rockwell Automation, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA denial-of-service vulnerability (CVE-2021-42260) in multiple Rockwell Automation ControlLogix and GuardLogix product lines allows attackers to trigger a major nonrecoverable fault, effectively halting industrial operations until manual recovery steps are performed. This is particularly dangerous in operational technology (OT) environments where availability is critical to safety and production continuity. The fact that recovery requires a program download or stage 2 reset means even a brief exploitation event can result in significant downtime and potential physical-world consequences. Unpatched industrial control systems remain one of the highest-risk attack surfaces in critical infrastructure, as firmware updates are often delayed due to operational constraints.
What helps against this
How we list vendors- Automated patch management
Known holes get closed in days, not months.
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2021-42260