Skip to content
OpenAdvisories
High ICSA-24-086-02 3 CVEs

Rockwell Automation PowerFlex 527

Published Mar 26, 2024 · Updated Mar 26, 2024

Vendor: Rockwell Automation Product: PowerFlex® 527

Summary

Successful exploitation of this these vulnerabilities could crash the device and require a manual restart to recover.

Vulnerabilities 3

  • High 7.5
    CVE-2024-2425

    Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

    A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it.

    Rockwell Automation PowerFlex® 527 ICS / OT
  • High 7.5
    CVE-2024-2426

    Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

    A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it.

    Rockwell Automation PowerFlex® 527 ICS / OT
  • High 7.5
    CVE-2024-2427

    Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

    A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover.

    Rockwell Automation PowerFlex® 527 ICS / OT

Revision history

  1. #1

    Initial Publication

References