CVE-2024-8626
highPriorität · verfolgen · 30EPSS 0.005 · 44. PerzentilDEEURUUSEPSS · bewertet 2026-10-26
Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behoben1756-EN4TRcisa_csaf_ot
1756-EN4TR: Update to version 4.001 and later
- BehobenCompact GuardLogix 5380cisa_csaf_ot
Compact GuardLogix 5380: Update to v33.015 and later for versions 33. Update to v34.011 and later
- BehobenCompactLogix 5380cisa_csaf_ot
CompactLogix 5380: Update to v33.015 and later for versions 33. Update to v34.011 and later
- BehobenCompactLogix 5480cisa_csaf_ot
CompactLogix 5480: Update to v33.015 and later for versions 33. Update to v34.011 and later
- BehobenControlLogix 5580cisa_csaf_ot
ControlLogix 5580: Update to v33.015 and later for versions 33. Update to v34.011 and later
- BehobenGuardLogix 5580cisa_csaf_ot
GuardLogix 5580: Update to v33.015 and later for versions 33. Update to v34.011 and later
- Mitigation1756-EN4TRcisa_csaf_ot
Customers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationCompact GuardLogix 5380cisa_csaf_ot
Customers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationCompactLogix 5380cisa_csaf_ot
Customers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationCompactLogix 5480cisa_csaf_ot
Customers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationControlLogix 5580cisa_csaf_ot
Customers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationGuardLogix 5580cisa_csaf_ot
Customers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.6–8.7
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (33)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2024-3115Rockwell Automation ControlLogix: Schwachstelle ermöglicht Denial of ServiceDeutsch2024-10-08csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Rockwell Automation ControlLogix ausnutzen, um einen Denial of Service Angriff durchzuführen.
- ICSA-24-284-18Rockwell Automation Logix Controllers2024-10-10icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service on the affected products.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (4)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2024-8626/cnnvd
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1706.htmlcnnvd
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1706.htmlenisa_euvd
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1706.htmlVendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan