{"id":"CVE-2024-9124","state":"PUBLISHED","title":"Rockwell Automation PowerFlex 6000T CIP Security denial-of-service Vulnerability","description":"A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 600T. If the device is overloaded with requests, it will become unavailable. The device may require a power cycle to recover it if it does not re-establish a connection after it stops receiving requests.","publishedAt":"2024-10-08T16:23:09.331Z","updatedAt":"2024-11-21T16:55:08.532Z","severity":{"score":8.2,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"Rockwell"},"assigner":"Rockwell","products":["Rockwell Automation Drives - PowerFlex 6000T"],"affected":[{"vendor":"Rockwell Automation","product":"Drives - PowerFlex 6000T","defaultStatus":"unaffected","versions":[{"version":"8.001","status":"affected"},{"version":"8.002","status":"affected"},{"version":"9.001","status":"affected"}]}],"references":["https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1705.html"],"weaknesses":["CWE-754"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/9xxx/CVE-2024-9124.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-9124","state":"PUBLISHED","datePublished":"2024-10-08T16:23:09.331Z","dateUpdated":"2024-11-21T16:55:08.532Z","assignerShortName":"Rockwell","assignerOrgId":"b73dd486-f505-4403-b634-40b078b177f0","dateReserved":"2024-09-23T20:07:02.816Z"},"containers":{"cna":{"title":"Rockwell Automation PowerFlex 6000T CIP Security denial-of-service Vulnerability","descriptions":[{"lang":"en","value":"A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 600T. If the device is overloaded with requests, it will become unavailable. The device may require a power cycle to recover it if it does not re-establish a connection after it stops receiving requests."}],"affected":[{"vendor":"Rockwell Automation","product":"Drives - PowerFlex 6000T","defaultStatus":"unaffected","versions":[{"version":"8.001","status":"affected"},{"version":"8.002","status":"affected"},{"version":"9.001","status":"affected"}]}],"references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1705.html"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":8.2,"baseSeverity":"HIGH","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-754","description":"CWE-754 Improper Check for Unusual or Exceptional Conditions","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Rockwell","orgId":"b73dd486-f505-4403-b634-40b078b177f0","dateUpdated":"2024-10-08T16:23:09.331Z"},"datePublic":"2024-10-08T16:16:00.000Z","impacts":[{"capecId":"CAPEC-26","descriptions":[{"lang":"en","value":"CAPEC-26 Leveraging Race Conditions"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<ul><li>Update to v10.001 or later</li></ul>\n\n<p><b>Mitigations and Workarounds </b><br>Customers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.    </p><ul><li><p><a target=\"_blank\" rel=\"nofollow\" href=\"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight\">Security Best Practices</a> </p></li></ul>\n\n<br>"}],"value":"*  Update to v10.001 or later\n\n\n\n\nMitigations and Workarounds \nCustomers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.    \n\n  *   Security Best Practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight"}],"source":{"advisory":"SD1705","discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"rockwellautomation","product":"powerflex_600t","defaultStatus":"unaffected","versions":[{"version":"8.001","status":"affected"},{"version":"8.002","status":"affected"},{"version":"9.001","status":"affected"}],"cpes":["cpe:2.3:a:rockwellautomation:powerflex_600t:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-08T18:57:04.611704Z","id":"CVE-2024-9124","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-21T16:55:08.532Z"}}]}}}