Denial of Service Vulnerability in Rockwell Automation Products
CVE-2024-8626

Currently unrated

Summary

A denial-of-service vulnerability caused by a memory leak exists in certain products from Rockwell Automation. This vulnerability can be exploited by a malicious actor performing multiple operations on designated web pages within the affected products. The exploitation of this vulnerability renders the systems fully unavailable, necessitating a power cycle to return to regular operational status. This poses significant risks to reliability and operational continuity in environments reliant on these automation solutions.

Affected Version(s)

1756-EN4TR v3.002

Compact GuardLogix® 5380 controllers v33.011<

CompactLogix 5380 controllers v33.011 <

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.