CVE-2024-6089

Summary

An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent, causing the secondary adapter to result in a major nonrecoverable fault. If exploited, a power cycle is required to recover the product.

Affected Software

Weaknesses

• CWE-20: CWE-20: Improper Input Validation

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1680.html

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1680.html

• ←Previous
• Next→