Critical severity · published Dec 18, 2024
CVE-2024-12372
Rockwell Automation PowerMonitor™ 1000 Denial of Service
9.3
CVSS
0.9%
EPSS
No
On KEV
Description
A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for remote code execution or a denial-of-service attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
P1
PM1k 1408-BC3A-485 · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-BC3A-ENT · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-EM1A-485 · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-EM1A-ENT · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-EM2A-485 · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-EM2A-ENT · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-EM3A-485 · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-EM3A-ENT · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-TR1A-485 · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-TR1A-ENT · Rockwell Automation
<4.020 · source: vendor
P1
PM1k 1408-TR2A-485 · Rockwell Automation
<v4.020 · source: vendor
P1
PM1k 1408-TR2A-ENT · Rockwell Automation
<4.020 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-12372
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-12372
www.rockwellautomation.com
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1714.html
More from PM1k 1408-BC3A-485
9.3
CVE-2024-12373
Rockwell Automation PowerMonitor™ 1000 Denial of Service
9.3
CVE-2024-12371
Rockwell Automation PowerMonitor™ 1000 Remote Code Execution
