What’s Vulnerable › Vulnerabilities

CVE-2024-2426: Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-25 · updated 2026-06-17
• Weakness: CWE-20

Description

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it.

Affected products

• Rockwell Automation PowerFlex® 527: from 2.001

References

• https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html
• https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html

Get alerted when CVE-2024-2426 or the next vulnerability affects your stack