CVE 2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and send a specially crafted CIP message to the device. If exploited, a threat actor could help prevent access to the legitimate user and end connections to connected devices including the workstation. To recover the controllers, a download is required which ends any process that the controller is running.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Controllogix_5580_firmware | Rockwellautomation | 28.011 (including) | 33.017 (excluding) |
| Controllogix_5580_firmware | Rockwellautomation | 34.011 (including) | 34.014 (excluding) |
| Controllogix_5580_firmware | Rockwellautomation | 35.011 (including) | 35.013 (excluding) |