{"id":"CVE-2024-6242","aliases":["EUVD-2024-47370","GHSA-6h2q-3m5q-wv4c"],"status":"published","title":"Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices","description":"A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.","severity":{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.111,"percentile":0.95982,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-420"],"published":"2024-08-01T15:15:32Z","modified":"2026-06-17T08:17:36Z","products":[{"vendor":"rockwell automation","product":"1756-en2f"},{"vendor":"rockwell automation","product":"1756-en2t"},{"vendor":"rockwell automation","product":"1756-en2tp"},{"vendor":"rockwell automation","product":"1756-en2tr"},{"vendor":"rockwell automation","product":"1756-en3tr"},{"vendor":"rockwell automation","product":"1756-en4tr"},{"vendor":"rockwell automation","product":"controllogix® 5580 (1756-l8z)"},{"vendor":"rockwell automation","product":"guardlogix® 5580  (1756-l8zs)"}],"references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1682.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6242"},{"url":"https://github.com/advisories/GHSA-6h2q-3m5q-wv4c"}],"sources":{"cve":[{"id":"CVE-2024-6242","title":"Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices","description":"A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.","status":"published","published":"2024-08-01T15:15:32.22Z","modified":"2025-09-25T13:34:40.444Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H","level":"high","assessor":"cna"}],"cwes":["CWE-420"],"updated_at":"2026-11-02T14:34:11.305983Z"}],"euvd":[{"id":"EUVD-2024-47370","description":"A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.","status":"published","published":"2024-08-01T15:15:32Z","modified":"2025-09-25T13:34:40Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H","level":"high"}],"updated_at":"2026-11-02T20:31:40.063213Z"}],"ghsa":[{"id":"GHSA-6h2q-3m5q-wv4c","title":"A vulnerability exists in Rockwell Automation affected products that allows a threat actor to...","description":"A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.","status":"published","published":"2024-08-01T18:32:50Z","modified":"2024-08-01T18:32:56Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-420"],"updated_at":"2026-11-02T14:57:49.83995Z"}],"nvd":[{"id":"CVE-2024-6242","description":"A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.","status":"published","published":"2024-08-01T16:15:07.013Z","modified":"2026-06-17T08:17:36.693Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-420"],"updated_at":"2026-11-02T14:10:15.933769Z"}]}}