Skip to content
OpenAdvisories
High · 7.5 CVE-2024-2425 EUVD-2024-27376GHSA-3mq7-j5f9-79xq

Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

Published Mar 25, 2024 · Updated Aug 1, 2024 · Assigned by Rockwell

Description

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it.

Affected products

VendorProductAffectedFixed
Rockwell Automation PowerFlex® 527 v2.001.x < —

Advisories 1

References