Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-6436

Rockwell Automation Input Validation Vulnerability exists in the SequenceManager™ Server

Description

An input validation vulnerability exists in the Rockwell Automation Sequence Manager™ which could allow a malicious user to send malformed packets to the server and cause a denial-of-service condition. If exploited, the device would become unresponsive, and a manual restart will be required for recovery. Additionally, if exploited, there could be a loss of view for the downstream equipment sequences in the controller. Users would not be able to view the status or command the equipment sequences, however the equipment sequence would continue to execute uninterrupted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation SequenceManager™

Default version status: unaffected

  • <2.0affected

References