Denial of Service Vulnerability in Rockwell Automation Products
CVE-2024-8626
Currently unrated
Key Information:
- Vendor
- Rockwell Automation
- Status
- Vendor
- CVE Published:
- 8 October 2024
Summary
A denial-of-service vulnerability caused by a memory leak exists in certain products from Rockwell Automation. This vulnerability can be exploited by a malicious actor performing multiple operations on designated web pages within the affected products. The exploitation of this vulnerability renders the systems fully unavailable, necessitating a power cycle to return to regular operational status. This poses significant risks to reliability and operational continuity in environments reliant on these automation solutions.
Affected Version(s)
1756-EN4TR v3.002
Compact GuardLogix® 5380 controllers v33.011<
CompactLogix 5380 controllers v33.011 <
References
Timeline
Vulnerability published
Vulnerability Reserved