CVE-2024-8626
HIGHRockwell Automation - DoS
Title source: llmDescription
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.
Scores
CVSS v3
7.5
EPSS
0.0018
EPSS Percentile
39.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-401
CWE-400
Status
published
Affected Products (6)
rockwellautomation/compactlogix_5380_firmware
< 33.015
rockwellautomation/compact_guardlogix_5380_firmware
< 33.015
rockwellautomation/compactlogix_5480_firmware
< 33.015
rockwellautomation/controllogix_5580_firmware
< 33.015
rockwellautomation/guardlogix_5580_firmware
< 33.015
rockwellautomation/1756-en4tr_firmware
Timeline
Published
Oct 08, 2024
Tracked Since
Feb 18, 2026