CVE-2024-2426

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:rockwellautomation:powerflex_527_ac_drives_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:rockwellautomation:powerflex_527_ac_drives:-:*:*:*:*:*:*:*

History

31 Jan 2025, 15:41

Type Values Removed Values Added
CPE cpe:2.3:h:rockwellautomation:powerflex_527_ac_drives:-:*:*:*:*:*:*:*
cpe:2.3:o:rockwellautomation:powerflex_527_ac_drives_firmware:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html - () https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html - Vendor Advisory
First Time Rockwellautomation powerflex 527 Ac Drives Firmware
Rockwellautomation powerflex 527 Ac Drives
Rockwellautomation

21 Nov 2024, 09:09

Type Values Removed Values Added
References () https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html - () https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html -

26 Mar 2024, 12:55

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de denegación de servicio en Rockwell Automation PowerFlex® 527 debido a una validación de entrada incorrecta en el dispositivo. Si se explota, se producirá una interrupción en la comunicación CIP y el usuario deberá reiniciar manualmente para recuperarla.

25 Mar 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-25 21:15

Updated : 2025-01-31 15:41


NVD link : CVE-2024-2426

Mitre link : CVE-2024-2426

CVE.ORG link : CVE-2024-2426


JSON object : View

Products Affected

rockwellautomation

  • powerflex_527_ac_drives
  • powerflex_527_ac_drives_firmware
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo