CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-21914 – Rockwell Automation - FactoryTalk® View ME on PanelView™ Plus 7 Boot Terminal lack Security Protections
https://notcve.org/view.php?id=CVE-2024-21914
A vulnerability exists in the affected product that allows a malicious user to restart the Rockwell Automation PanelView™ Plus 7 terminal remotely without security protections. If the vulnerability is exploited, it could lead to the loss of view or control of the PanelView™ product. Existe una vulnerabilidad en el producto afectado que permite a un usuario malintencionado reiniciar el terminal Rockwell Automation PanelView™ Plus 7 de forma remota sin protecciones de seguridad. Si se explota la vulnerabilidad, podría provocar la pérdida de visión o control del producto PanelView™. • https://www.rockwellautomation.com/en-us/support/advisory.SD1663.html • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-2427 – Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
https://notcve.org/view.php?id=CVE-2024-2427
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover. Existe una vulnerabilidad de denegación de servicio en Rockwell Automation PowerFlex® 527 debido a una limitación inadecuada del tráfico en el dispositivo. Si se envían varios paquetes de datos al dispositivo repetidamente, el dispositivo fallará y requerirá un reinicio manual para recuperarse. • https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-2426 – Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
https://notcve.org/view.php?id=CVE-2024-2426
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it. Existe una vulnerabilidad de denegación de servicio en Rockwell Automation PowerFlex® 527 debido a una validación de entrada incorrecta en el dispositivo. Si se explota, se producirá una interrupción en la comunicación CIP y el usuario deberá reiniciar manualmente para recuperarla. • https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-2425 – Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527
https://notcve.org/view.php?id=CVE-2024-2425
A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it. Existe una vulnerabilidad de denegación de servicio en Rockwell Automation PowerFlex® 527 debido a una validación de entrada incorrecta en el dispositivo. Si se explota, el servidor web fallará y será necesario reiniciarlo manualmente para recuperarlo. • https://https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html • CWE-20: Improper Input Validation •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-21915 – Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality
https://notcve.org/view.php?id=CVE-2024-21915
A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A threat actor could potentially read and modify sensitive data, delete data and render the FTSP system unavailable. Existe una vulnerabilidad de escalada de privilegios en Rockwell Automation FactoryTalk® Service Platform (FTSP). Si se explota, un usuario malintencionado con privilegios básicos de grupo de usuarios podría iniciar sesión en el software y recibir privilegios de grupo de administrador FTSP. • https://www.rockwellautomation.com/en-us/support/advisory.SD1662.html • CWE-732: Incorrect Permission Assignment for Critical Resource •