CVE-2024-6242

HIGH Year: 2024
Weakness Type
CWE-420
View all →

Vulnerability Description

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP commands that modify user projects and/or device configuration on a Logix controller in the chassis.

Related Vulnerabilities

CVE-2023-20198

CRITICAL
CVSS:10.0(Critical)

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software...

CWE-4202023

CVE-2023-31241

CRITICAL
CVSS:10.0(Critical)

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

CWE-4202023

CVE-2020-8558

HIGH
CVSS:8.8(High)

The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound...

CWE-4202020

CVE-2023-4570

HIGH
CVSS:8.8(High)

An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be...

CWE-4202023

CVE-2023-28840

HIGH
CVSS:8.7(High)

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component...

CWE-4202023

CVE-2023-52718

HIGH
CVSS:8.1(High)

A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This v...

CWE-4202023