WID-SEC-2024-3115 — Rockwell Automation ControlLogix: Schwachstelle ermöglicht Denial of Service

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Rockwell Automation ControlLogix ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

ControlLogix bezeichnet eine Produktfamilie von Steuerungssystemen für Industrieanlagen.

Vulnerabilities 1

High 8.7

CVE-2024-8626

Logix Controllers Vulnerable to Denial-of-Service Vulnerability

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to…

Rockwell Automation CompactLogix 5380 controllers CompactLogix 5480 controllers 1756-EN4TR ICS / OT

Oct 8, 2024

Revision history

2024-12-01 #2
Prüfung Produkteintragung
2024-10-08 #1
Initiale Fassung

References

Rockwell Automation Security Advisory SD1706 vom 2024-10-08
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1706.html