Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-12372

Rockwell Automation PowerMonitor™ 1000 Denial of Service

Description

A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for remote code execution or a denial-of-service attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation PM1k 1408-BC3A-485

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-BC3A-ENT

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-TS3A-485

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-TS3A-ENT

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-EM3A-485

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-EM3A-ENT

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-TR1A-485

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-TR2A-485

Default version status: unaffected

  • <v4.020affected

Rockwell Automation PM1k 1408-EM1A-485

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-EM2A-485

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-TR1A-ENT

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-TR2A-ENT

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-EM1A-ENT

Default version status: unaffected

  • <4.020affected

Rockwell Automation PM1k 1408-EM2A-ENT

Default version status: unaffected

  • <4.020affected

References