CVE-2024-8626highCWE-400

CVE-2024-8626: falha de alta gravidade em Rockwell Automation 1756-EN4TR

Logix Controllers Vulnerable to Denial-of-Service Vulnerability

Publicada em

Seguir esta CVE+ Monitorar 1756-EN4TR+ Monitorar Compact GuardLogix 5380 controllers

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.5%
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Rockwell Automation · 1756-EN4TRRockwell Automation · Compact GuardLogix® 5380 controllersRockwell Automation · CompactLogix 5380 controllersRockwell Automation · CompactLogix 5480 controllersRockwell Automation · GuardLogix 5580 controllers
CVEs relacionadas — Rockwell Automation 1756-EN4TR

No mesmo produto, das mais perigosas para as menos.

CVE-2024-6242HIGHRockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix DevicesEPSS 11.1%CVE-2022-1161CRITICALICSA-22-090-05 Rockwell Automation Logix ControllersEPSS 5.2%CVE-2022-1797MEDIUMRockwell Automation Logix Controllers Uncontrolled Resource ConsumptionEPSS 2.2%CVE-2024-3493HIGHRockwell Automation ControlLogix and GaurdLogix Vulnerable to Major Nonrecoverable Fault Due to Invalid Header ValueEPSS 0.6%