CVE-2024-2427 — Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

CVE-2024-2427

Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527 PUBLISHED

Description (CNA)

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / PowerFlex® 527	affected v2.001.x <

CWE

CWE-20

References

https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html

ADP enrichment

CVE

No English description supplied.

https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html

CISA-ADP

No English description supplied.

No references supplied.