[{"vendor":"rockwellautomation","product":"compactlogix_5380_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"33.011","lessThan":"33.015","versionType":"custom","status":"affected"}]},{"vendor":"rockwellautomation","product":"compact_guardlogix_5380_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"33.011","lessThan":"33.015","versionType":"custom","status":"affected"}]},{"vendor":"rockwellautomation","product":"compactlogix_5480_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"33.011","lessThan":"33.015","versionType":"custom","status":"affected"}]},{"vendor":"rockwellautomation","product":"guardlogix_5580_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"33.001","lessThan":"33.015","versionType":"custom","status":"affected"}]},{"vendor":"rockwellautomation","product":"1756-en4tr_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:rockwellautomation:1756-en4tr_firmware:3.002:*:*:*:*:*:*:*"],"versions":[{"version":"3.002","status":"affected"}]}]

{"timestamp":"2024-10-08T17:29:59.695076Z","id":"CVE-2024-8626","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Rockwell Automation","product":"CompactLogix 5380 controllers","defaultStatus":"unaffected","versions":[{"version":"v33.011 <","status":"affected"}]},{"vendor":"Rockwell Automation","product":"Compact GuardLogix® 5380 controllers","defaultStatus":"unaffected","versions":[{"version":"v33.011<","status":"affected"}]},{"vendor":"Rockwell Automation","product":"CompactLogix 5480 controllers","defaultStatus":"unaffected","versions":[{"version":"v33.011<","status":"affected"}]},{"vendor":"Rockwell Automation","product":"GuardLogix 5580 controllers","defaultStatus":"unaffected","versions":[{"version":"v33.011<","status":"affected"}]},{"vendor":"Rockwell Automation","product":"1756-EN4TR","defaultStatus":"unaffected","versions":[{"version":"v3.002","status":"affected"}]}]

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-401

AND
     OR
          *cpe:2.3:o:rockwellautomation:1756-en4tr_firmware:3.002:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:rockwellautomation:1756-en4tr:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:*:*:*:*:*:*:*:* versions from (including) 33.011 from (excluding) 33.015
     OR
          cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:*:*:*:*:*:*:*:* versions from (including) 33.011 from (excluding) 33.015
     OR
          cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:*:*:*:*:*:*:*:* versions from (including) 33.011 from (excluding) 33.015
     OR
          cpe:2.3:h:rockwellautomation:compactlogix_5480:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:*:*:*:*:*:*:*:* versions from (including) 33.011 from (excluding) 33.015
     OR
          cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:*:*:*:*:*:*:*:* versions from (including) 33.011 from (excluding) 33.015
     OR
          cpe:2.3:h:rockwellautomation:guardlogix_5580:-:*:*:*:*:*:*:*

Rockwell Automation: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1706.html Types: Vendor Advisory

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

Rockwell Automation CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Rockwell Automation CWE-400

Rockwell Automation https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1706.html [No types assigned]