CVE-2024-6436

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-6436
An input validation vulnerability exists in the Rockwell Automation Sequence Manager™ which could allow a malicious user to send malformed packets to the server and cause a denial-of-service condition. If exploited, the device would become unresponsive, and a manual restart will be required for recovery. Additionally, if exploited, there could be a loss of view for the downstream equipment sequences in the controller. Users would not be able to view the status or command the equipment sequences, however the equipment sequence would continue to execute uninterrupted.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1679.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:rockwellautomation:sequencemanager:*:*:*:*:*:*:*:*
History

22 Oct 2025, 20:29

Type Values Removed Values Added
References () https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1679.html - () https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1679.html - Vendor Advisory
CPE cpe:2.3:a:rockwellautomation:sequencemanager:*:*:*:*:*:*:*:*
First Time Rockwellautomation sequencemanager
Rockwellautomation
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5

30 Sep 2024, 12:45

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de validación de entrada en Rockwell Automation Sequence Manager™ que podría permitir que un usuario malintencionado envíe paquetes malformados al servidor y provoque una condición de denegación de servicio. Si se explota, el dispositivo dejaría de responder y sería necesario reiniciarlo manualmente para recuperarlo. Además, si se explota, podría perderse la vista de las secuencias de equipos posteriores en el controlador. Los usuarios no podrían ver el estado ni ordenar las secuencias de equipos, pero la secuencia de equipos seguiría ejecutándose sin interrupciones.

27 Sep 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-27 20:15

Updated : 2025-10-22 20:29

NVD link : CVE-2024-6436

Mitre link : CVE-2024-6436

CVE.ORG link : CVE-2024-6436

JSON object : View

Products Affected

rockwellautomation

  • sequencemanager
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo