Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-8626

Logix Controllers Vulnerable to Denial-of-Service Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation CompactLogix 5380 controllers

Default version status: unaffected

  • v33.011 <affected

Rockwell Automation Compact GuardLogix® 5380 controllers

Default version status: unaffected

  • v33.011<affected

Rockwell Automation CompactLogix 5480 controllers

Default version status: unaffected

  • v33.011<affected

Rockwell Automation GuardLogix 5580 controllers

Default version status: unaffected

  • v33.011<affected

Rockwell Automation 1756-EN4TR

Default version status: unaffected

  • v3.002affected

References