CVE-2024-8626 - CVE House
Back to Database
Status published High CVE-2024-8626

Logix Controllers Vulnerable to Denial-of-Service Vulnerability

Vulnerability Description

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8626

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Rockwell Automation

View all reports →

Affected Software

CompactLogix 5380 controllers, Compact GuardLogix® 5380 controllers, CompactLogix 5480 controllers, GuardLogix 5580 controllers, 1756-EN4TR
Vulnerable Versions:
v33.011 <, v33.011<, v3.002

Timeline

Official Publish: October 8th, 2024
Last Modified: October 8th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)