CVE-2024-5659
Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
- Record
CVE-2024-5659- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H - Weakness
- CWE-670
- Updated
- 2026-11-02
EUVDEUVD-2024-46834
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
- Record
EUVD-2024-46834- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-949p-hqw3-rgm2 No score
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the...
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
- Record
GHSA-949p-hqw3-rgm2- Weakness
- CWE-670
- Updated
- 2026-11-02
NVD
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised.
- Record
CVE-2024-5659- CVSS 4.0
- 8.3 High
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-670
- Updated
- 2026-11-02
Affected products
- rockwell automation 1756-en4
- rockwell automation compact guardlogix 5380
- rockwell automation compactlogix 5380
- rockwell automation compactlogix 5480
- rockwell automation controllogix® 5580
- rockwell automation guardlogix 5580
- rockwellautomation 1756-en4 firmware
- rockwellautomation 1756 en4
- rockwellautomation compact guardlogix 5380 firmware
- rockwellautomation compact guardlogix 5480
- rockwellautomation compact logix 5480
- rockwellautomation compactlogix
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-5659 is a high vulnerability (CVSS 8.3) in Rockwell Automation 1756-en4, published June 14, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. No source names a fixed version.