CVE-2024-8626: rockwellautomation compactlogix 5380 firmware…

csirt@kutim:~/threat-intel/cve/CVE-2024-8626

CVSS 7.5 · High EPSS 0,52%

Kerentanan Uncontrolled Resource Consumption pada rockwellautomation compactlogix 5380 firmware, rockwellautomation compact guardlogix 5380 firmware +4 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

Rincian

Terbit di NVD: 8 Oktober 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-400: Uncontrolled Resource Consumption
CWE-401: Missing Release of Memory after Effective Lifetime
EPSS (30 hari): 0,52% peluang dieksploitasi; lebih tinggi dari 42,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
rockwellautomation	compactlogix 5380 firmware	Versi 33.011 hingga sebelum 33.015
rockwellautomation	compact guardlogix 5380 firmware	Versi 33.011 hingga sebelum 33.015
rockwellautomation	compactlogix 5480 firmware	Versi 33.011 hingga sebelum 33.015
rockwellautomation	controllogix 5580 firmware	Versi 33.011 hingga sebelum 33.015
rockwellautomation	guardlogix 5580 firmware	Versi 33.011 hingga sebelum 33.015
rockwellautomation	1756-en4tr firmware	Versi 3.002

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1706.html advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.