Denial of Service Vulnerability in Rockwell Automation Products
CVE-2024-8626
7.5HIGH
Key Information:
- Vendor
- Rockwell Automation
- Status
- Vendor
- CVE Published:
- 8 October 2024
Summary
A denial-of-service vulnerability caused by a memory leak exists in certain products from Rockwell Automation. This vulnerability can be exploited by a malicious actor performing multiple operations on designated web pages within the affected products. The exploitation of this vulnerability renders the systems fully unavailable, necessitating a power cycle to return to regular operational status. This poses significant risks to reliability and operational continuity in environments reliant on these automation solutions.
Affected Version(s)
1756-EN4TR v3.002
Compact GuardLogix® 5380 controllers v33.011<
CompactLogix 5380 controllers v33.011 <
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved