CVE-2024-9124

HIGH

Rockwellautomation Powerflex 6000t Firmware - Improper Condition Check

Title source: rule
STIX 2.1

Description

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 600T. If the device is overloaded with requests, it will become unavailable. The device may require a power cycle to recover it if it does not re-establish a connection after it stops receiving requests.

References (1)

Scores

CVSS v3 7.5
EPSS 0.0030
EPSS Percentile 53.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-754
Status published
Products (3)
rockwellautomation/powerflex_6000t_firmware 8.001
rockwellautomation/powerflex_6000t_firmware 8.002
rockwellautomation/powerflex_6000t_firmware 9.001
Published Oct 08, 2024
Tracked Since Feb 18, 2026