CVE-2024-2425

Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

CVSS 7.5 HIGHEPSS 2.8%CWE-20

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Rockwell Automation · PowerFlex® 527

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html