Description
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | CompactLogix 5380 controllers | v33.011 < |
| Rockwell Automation | Compact GuardLogix® 5380 controllers | v33.011< |
| Rockwell Automation | CompactLogix 5480 controllers | v33.011< |
| Rockwell Automation | GuardLogix 5580 controllers | v33.011< |
| Rockwell Automation | 1756-EN4TR | v3.002 |
| rockwellautomation | compactlogix_5380_firmware | >= 33.011, < 33.015 |
| rockwellautomation | compact_guardlogix_5380_firmware | >= 33.011, < 33.015 |
| rockwellautomation | compactlogix_5480_firmware | >= 33.011, < 33.015 |
| rockwellautomation | guardlogix_5580_firmware | >= 33.001, < 33.015 |
| rockwellautomation | 1756-en4tr_firmware | 3.002 |
References
Timeline
- Published
- Oct 8, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed