CVE-2024-6089CWE-20
Rockwell Automation Major nonrecoverable fault in 5015 – AENFTXT
High · published July 16, 2024
What it is
An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent, causing the secondary adapter to result in a major nonrecoverable fault. If exploited, a power cycle is required to recover the product.
The record
Technical detail
- CVSS v4.0
- 8.7 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.02123 · 81.7th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2024-07-16T17:10Z
EPSS history
Timeline