csirt@kutim:~/threat-intel/cve/CVE-2023-2423

Katalog CVE

CVSS 7.5 · High EPSS 1,2%

Kerentanan Incorrect Calculation pada rockwellautomation armor powerflex firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors could exploit this vulnerability by sending an influx of network commands, causing the product to generate an influx of event log traffic at a high rate. If exploited, the product would stop normal operations and self-reset creating a denial-of-service condition. The error code would need to be cleared prior to resuming normal operations.

Rincian

Terbit di NVD
8 Agustus 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-682: Incorrect Calculation
EPSS (30 hari)
1,2% peluang dieksploitasi; lebih tinggi dari 67,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
rockwellautomation armor powerflex firmware Semua versi hingga 1.003

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.