Skip to content
OpenAdvisories
High · 7.5 CVE-2024-2427 EUVD-2024-27378GHSA-7qfp-8qgp-4xc8

Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

Published Mar 25, 2024 · Updated Aug 21, 2024 · Assigned by Rockwell

Description

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover.

Affected products

VendorProductAffectedFixed
Rockwell Automation PowerFlex® 527 v2.001.x < —

Advisories 1

References