Medium severity · published Aug 13, 2024
CVE-2024-7567
Rockwell Automation Micro850/870 Vulnerable to denial-of-service Vulnerability via CIP/Modbus Port
6.9
CVSS
0.5%
EPSS
No
On KEV
Description
A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 (2080 -L50E/2080 -L70E). If exploited, the CIP/Modbus communication may be disrupted for short duration.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PM
PLC - Micro850/870 (2080 -L50E/2080 -L70E) · Rockwell Automation
v20.011 · source: vendor
MF
Micro850 Firmware · Rockwellautomation
20.011 before 22.011 · source: CISA
MF
Micro870 Firmware · Rockwellautomation
20.011 before 22.011 · source: CISA
Affected product
PM
PLC - Micro850/870 (2080 -L50E/2080 -L70E)
Rockwell Automation