CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message...

8.7 CVSS

Vulnerability Description

CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6207

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html

More from Rockwell Automation

View All →

CVE-2025-9466

ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

High 8.7

CVE-2025-9465

ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

High 8.7

CVE-2025-9464

Rockwell Automation ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities

High 8.7

CVE-2025-9437

Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability

High 8.7

CVE-2025-9368

432ES-IG3 Series A Denial-of-Service Vulnerability

High 8.7

Affected Vendor

Rockwell Automation

View all reports →

Affected Software

ControlLogix® 5580, ControlLogix® 5580 Process, GuardLogix 5580, CompactLogix 5380, Compact GuardLogix 5380 SIL 2, Compact GuardLogix 5380 SIL 3, CompactLogix 5480, FactoryTalk® Logix Echo

Vulnerable Versions:

V28.011, V33.011, V31.011, V32.013, V32.011