PowerFlex® 527 Vulnerable to Denial-of-Service Attacks

CVE-2024-2427

What is CVE-2024-2427?

The Rockwell Automation PowerFlex® 527 is susceptible to a denial-of-service vulnerability caused by improper traffic throttling. This issue allows an attacker to send multiple data packets to the device in rapid succession, potentially leading to a crash of the system. When this occurs, the affected device will need a manual restart in order to resume normal operations. Organizations utilizing this product should assess their exposure and implement appropriate mitigations to protect against this risk.

References