CVE-2024-12372

Summary

A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for remote code execution or a denial-of-service attack.

Affected Software

VendorProductVersion RangeStatus
Rockwell AutomationPM1k 1408-BC3A-485<4.020affected
Rockwell AutomationPM1k 1408-BC3A-ENT<4.020affected
Rockwell AutomationPM1k 1408-TS3A-485<4.020affected
Rockwell AutomationPM1k 1408-TS3A-ENT<4.020affected
Rockwell AutomationPM1k 1408-EM3A-485<4.020affected
Rockwell AutomationPM1k 1408-EM3A-ENT<4.020affected
Rockwell AutomationPM1k 1408-TR1A-485<4.020affected
Rockwell AutomationPM1k 1408-TR2A-485<v4.020affected
Rockwell AutomationPM1k 1408-EM1A-485<4.020affected
Rockwell AutomationPM1k 1408-EM2A-485<4.020affected
Rockwell AutomationPM1k 1408-TR1A-ENT<4.020affected
Rockwell AutomationPM1k 1408-TR2A-ENT<4.020affected
Rockwell AutomationPM1k 1408-EM1A-ENT<4.020affected
Rockwell AutomationPM1k 1408-EM2A-ENT<4.020affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References