CVE-2024-21916CWE-119

Rockwell Automation Denial-of-service Vulnerability in ICE1 Controller

High · published January 31, 2024

CVSS v3.1
8.6
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault (MNRF). The device will restart itself to recover from the MNRF.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00648 · 50.4th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2024-01-31T18:28Z
EPSS history
Timeline
  • 31 JAN 18:28Z
    Rockwell Automation Denial-of-service Vulnerability in ICE1 Controller
    cvelistv5