Critical ICSA-24-352-03 3 CVEs

Rockwell Automation PowerMonitor 1000 Remote

Published Dec 17, 2024 · Updated Dec 17, 2024

Vendor: Rockwell Automation Product: PM1k 1408-BC3A-485 Product: PM1k 1408-BC3A-ENT Product: PM1k 1408-EM1A-485 Product: PM1k 1408-EM1A-ENT Product: PM1k 1408-EM2A-485 Product: PM1k 1408-EM2A-ENT Product: PM1k 1408-EM3A-485 Product: PM1k 1408-EM3A-ENT Product: PM1k 1408-TR1A-485 Product: PM1k 1408-TR1A-ENT Product: PM1k 1408-TR2A-485 Product: PM1k 1408-TR2A-ENT Product: PM1k 1408-TS3A-485 Product: PM1k 1408-TS3A-ENT

Summary

Successful exploitation of these vulnerabilities could allow an attacker to perform edit operations, create admin users, perform factory reset, execute arbitrary code, or cause a denial-of-service condition.

Vulnerabilities 3

Critical 9.3

CVE-2024-12371

Rockwell Automation PowerMonitor™ 1000 Remote Code Execution

A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit op…

Rockwell Automation PM1k 1408-EM1A-ENT PM1k 1408-EM3A-ENT PM1k 1408-TR2A-485 ICS / OT

Dec 18, 2024
Critical 9.3

CVE-2024-12372

Rockwell Automation PowerMonitor™ 1000 Denial of Service

A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for re…

Rockwell Automation PM1k 1408-EM1A-ENT PM1k 1408-EM3A-ENT PM1k 1408-TR2A-485 ICS / OT

Dec 18, 2024
Critical 9.3

CVE-2024-12373

Rockwell Automation PowerMonitor™ 1000 Denial of Service

A denial-of-service vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in a buffer-overflow, potentially causing denial-of-service.

Rockwell Automation PM1k 1408-EM1A-ENT PM1k 1408-EM3A-ENT PM1k 1408-TR2A-485 ICS / OT

Dec 18, 2024

Revision history

2024-12-17 #1
Initial Publication

References

ICSA Advisory ICSA-24-352-03 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-03
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
Recommended Practices
https://www.cisa.gov/uscert/ncas/tips/ST04-014