Skip to content
OpenAdvisories
High · 7.5 CVE-2024-2424 EUVD-2024-27375GHSA-h4mf-2q8r-28xx

Rockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable Fault

Published Apr 15, 2024 · Updated Aug 1, 2024 · Assigned by Rockwell

Description

An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability.

Affected products

VendorProductAffectedFixed
Rockwell Automation 5015-AENFTXT v35 —

Advisories 1

References