high7.5
CVE-2024-8626
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products.
Impact
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | Compactlogix 5380 Firmware | from 33.011 before 33.015 |
| Rockwellautomation | Compact Guardlogix 5380 Firmware | from 33.011 before 33.015 |
| Rockwellautomation | Compactlogix 5480 Firmware | from 33.011 before 33.015 |
| Rockwellautomation | Controllogix 5580 Firmware | from 33.011 before 33.015 |
| Rockwellautomation | Guardlogix 5580 Firmware | from 33.011 before 33.015 |
| Rockwellautomation | 1756-En4tr Firmware | Version 3.002 |