8.7
High
CVE-2024-8626 Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products
Description
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CompactLogix 5380 controllers | Versions not published | |
| Compact GuardLogix® 5380 controllers | Versions not published | |
| CompactLogix 5480 controllers | Versions not published | |
| GuardLogix 5580 controllers | Versions not published | |
| 1756-EN4TR | 3.002 | No fix stated |
| compactlogix_5380_firmware 33.011 | 33.011 → < 33.015 | 33.015 |
| compact_guardlogix_5380_firmware 33.011 | 33.011 → < 33.015 | 33.015 |
| compactlogix_5480_firmware 33.011 | 33.011 → < 33.015 | 33.015 |
| guardlogix_5580_firmware 33.001 | 33.001 → < 33.015 | 33.015 |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| 1756-en4tr_firmware | 3.002 | No fix stated |