An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Cont
An attacker could send crafted SMTP packets to cause a denial-of-service condition where the controller enters a major non-recoverable faulted state (MNRF) in CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers Versions 20 - 30 and earlier.
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | CompactLogix 5370 L1 controllers | 0 |
| Rockwell Automation | CompactLogix 5370 L2 controllers | 0 |
| Rockwell Automation | CompactLogix 5370 L3 controllers | 0 |
| Rockwell Automation | Compact GuardLogix 5370 controllers | 0 |
| Rockwell Automation | Armor Compact GuardLogix 5370 controllers | 0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.