CVE-2024-12371

Published Dec 18, 2024

Last updated 2 months ago

CVSS critical 9.3

Overview

Description
A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit operations, creating admin users and performing factory reset.
Source
PSIRT@rockwellautomation.com
NVD status
Awaiting Analysis

Risk scores

CVSS 4.0

Type
Secondary
Base score
9.3
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-306

Social media

Hype score
Not currently trending

  1. 【リンク集：12月20日〜23日のセキュリティ関連ニュース/記事】 ＜脆弱性＞ ・ロックウェル製PowerMonitorの脆弱性、産業システムへのリモート攻撃を可能に（CVE-2024-12371、CVE-2024-12372他） https://t.co/W6cok1X881… https://t.co/c6naTnFhWr

    @MachinaRecord

    23 Dec 2024

    151 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. Critical Flaws in Rockwell Automation PowerMonitor 1000 Devices: CVSS Scores Hit 9.8/10 Protect your Rockwell Automation PowerMonitor 1000 devices from critical flaws CVE-2024-12371, CVE-2024-12372, and CVE-2024-12373. Learn how to secure your systems https://t.co/hbJUfZ6L0o

    @the_yellow_fall

    21 Dec 2024

    304 Impressions

    1 Retweet

    4 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  3. CVE-2024-12371 A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any a… https://t.co/i3AvNCjbfE

    @CVEnew

    18 Dec 2024

    380 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. [CVE-2024-12371: CRITICAL] Critical vulnerability in Rockwell Automation Power Monitor 1000 allows unauthorized creation of privileged users. Ensure immediate security measures are taken to prevent device takeover.#cybersecurity,#vulnerability https://t.co/7MpVZ6thY6 https://t.co

    @CveFindCom

    18 Dec 2024

    20 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References