CVE-2024-2425

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it.

Score

CVSS 3.1 7.5 High

Status

Analyzed - PSIRT@rockwellautomation.com

Published

2024-03-25

Last modified

2024-08-01

Weaknesses

CWE-20

Affected products

• Powerflex 527 (Rockwell Automation)
• Powerflex 527 Ac Drives Firmware (Rockwellautomation)

References

• https://https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html