← Database

CVE-2024-8626

HIGH CVSS: 7.5 Published: 2024-10-08 Modified: 2026-06-17

Description

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

Affected Platforms

Rockwellautomation Compactlogix 5480 FirmwareRockwellautomation Guardlogix 5580Rockwellautomation Compactlogix 5380 FirmwareRockwellautomation Compact Guardlogix 5380Rockwellautomation Compact Guardlogix 5380 FirmwareRockwellautomation 1756-En4Tr FirmwareRockwellautomation 1756-En4TrRockwellautomation Compactlogix 5480Rockwellautomation Guardlogix 5580 FirmwareRockwellautomation Compactlogix 5380

Weakness Type

CWE-400, CWE-401

References