What’s Vulnerable › Vulnerabilities

CVE-2024-2427: Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-25 · updated 2026-06-17
• Weakness: CWE-20

Description

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover.

Affected products

• Rockwell Automation PowerFlex® 527: from 2.001

References

• https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html
• https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html

Get alerted when CVE-2024-2427 or the next vulnerability affects your stack