CVE-2024-12372 — Rockwell Automation PowerMonitor™ 1000 Denial of Service

Description (CNA)

A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for remote code execution or a denial-of-service attack.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / PM1k 1408-BC3A-485	affected <4.020
Rockwell Automation / PM1k 1408-BC3A-ENT	affected <4.020
Rockwell Automation / PM1k 1408-TS3A-485	affected <4.020
Rockwell Automation / PM1k 1408-TS3A-ENT	affected <4.020
Rockwell Automation / PM1k 1408-EM3A-485	affected <4.020
Rockwell Automation / PM1k 1408-EM3A-ENT	affected <4.020
Rockwell Automation / PM1k 1408-TR1A-485	affected <4.020
Rockwell Automation / PM1k 1408-TR2A-485	affected <v4.020
Rockwell Automation / PM1k 1408-EM1A-485	affected <4.020
Rockwell Automation / PM1k 1408-EM2A-485	affected <4.020
Rockwell Automation / PM1k 1408-TR1A-ENT	affected <4.020
Rockwell Automation / PM1k 1408-TR2A-ENT	affected <4.020
Rockwell Automation / PM1k 1408-EM1A-ENT	affected <4.020
Rockwell Automation / PM1k 1408-EM2A-ENT	affected <4.020

CWE

No CWE identifiers supplied.

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1714.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.