CVEvulnerability

CVE-2024-2427

7.5 HIGH Published 2024-03-25 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20

Description

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover.

Affected configurations

• rockwellautomation powerflex 527 ac drives firmware (>= 2.001)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References