CVE-2024-2426 — Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

CVE-2024-2426

Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527 PUBLISHED

Description (CNA)

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / PowerFlex® 527	affected v2.001.x <

CWE

CWE-20

References

https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html

ADP enrichment

CVE

No English description supplied.

https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html

CISA-ADP

No English description supplied.

No references supplied.