PT-2024-8139
CVE-2024-8626
·
تاريخ النشر
2024-10-07
·
تاريخ التحديث
2026-10-05
الوصف من
CVSS 4.0
8.7
عاليةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
Rockwell Automation products (affected versions not specified)
ControlLogix 5580 versions (no specific range provided)
GuardLogix 5580 versions (no specific range provided)
CompactLogix 5380 versions (no specific range provided)
CompactLogix 5480 versions (no specific range provided)
Compact GuardLogix 5380 versions (no specific range provided)
1756-EN4TR versions (no specific range provided)
Description:
A denial-of-service vulnerability exists in Rockwell Automation products due to a memory leak. This issue can be exploited by a malicious actor performing multiple actions on certain web pages, causing the products to become fully unavailable and require a power cycle to recover. The vulnerability is related to an uncontrolled resource consumption.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾