ГлавнаяУязвимости → CVE-2024-2424
7.5высокая

CVE-2024-2424

→ есть в БДУ: BDU:2024-10623 (на русском)
Описание (на английском; русское — в БДУ выше)

An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability.

Затрагиваемое ПО
Rockwellautomation 5015-aenftxt firmwareRockwellautomation 5015-aenftxt
CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Источники
https://www.rockwellautomation.com/en-us/support/advisory.SD1667.htmlhttps://www.rockwellautomation.com/en-us/support/advisory.SD1667.html