Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 12 products
🏭 Rockwell Logix CVE-2024-8626 (CVSS 8.7): How unauthenticated HTTP requests trigger memory leaks in PLCs, forcing physical power cycles. Read Blog: https://sh3llc0d3.com/blog/rockwell-logix-memory-exhaustion-dissecting-the-cve-2024-8626-denial-of-service/ #sh3llc0d3 #shellcode #Hacktober #OTSecurity
12 of 12 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | rockwellautomation | 1756-en4tr | - | - | - |
| OS | rockwellautomation | 1756-en4tr_firmware | 3.002 | - | - |
| HW | rockwellautomation | compact_guardlogix_5380 | - | - | - |
| OS | rockwellautomation | compact_guardlogix_5380_firmware | - | - | - |
| HW | rockwellautomation | compactlogix_5380 | - | - | - |
| OS | rockwellautomation | compactlogix_5380_firmware | - | - | - |
| HW | rockwellautomation | compactlogix_5480 | - | - | - |
| OS | rockwellautomation | compactlogix_5480_firmware | - | - | - |
| HW | rockwellautomation | controllogix_5580 | - | - | - |
| OS | rockwellautomation | controllogix_5580_firmware | - | - | - |
| HW | rockwellautomation | guardlogix_5580 | - | - | - |
| OS | rockwellautomation | guardlogix_5580_firmware | - | - | - |