Description
A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit operations, creating admin users and performing factory reset.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | PM1k 1408-BC3A-485 | <4.020 | — |
| Rockwell Automation | PM1k 1408-BC3A-ENT | <4.020 | — |
| Rockwell Automation | PM1k 1408-TS3A-485 | <4.020 | — |
| Rockwell Automation | PM1k 1408-TS3A-ENT | <4.020 | — |
| Rockwell Automation | PM1k 1408-EM3A-485 | <4.020 | — |
| Rockwell Automation | PM1k 1408-EM3A-ENT | <4.020 | — |
| Rockwell Automation | PM1k 1408-TR1A-485 | <4.020 | — |
| Rockwell Automation | PM1k 1408-TR2A-485 | <v4.020 | — |
| Rockwell Automation | PM1k 1408-EM1A-485 | <4.020 | — |
| Rockwell Automation | PM1k 1408-EM2A-485 | <4.020 | — |
| Rockwell Automation | PM1k 1408-TR1A-ENT | <4.020 | — |
| Rockwell Automation | PM1k 1408-TR2A-ENT | <4.020 | — |
| Rockwell Automation | PM1k 1408-EM1A-ENT | <4.020 | — |
| Rockwell Automation | PM1k 1408-EM2A-ENT | <4.020 | — |
Advisories 2
- NCSC-2024-0495 Kwetsbaarheden verholpen in Rockwell Automation Power Monitor 1000 NCSC-NL (Netherlands) · Dec 19, 2024
- ICSA-24-352-03 Rockwell Automation PowerMonitor 1000 Remote CISA ICS & IT advisories · Dec 17, 2024