CVE-2024-12372

Published Dec 18, 2024

Last updated 2 months ago

CVSS critical 9.3

Overview

Description
A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for remote code execution or a denial-of-service attack.
Source
PSIRT@rockwellautomation.com
NVD status
Awaiting Analysis

Risk scores

CVSS 4.0

Type
Secondary
Base score
9.3
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-94

Social media

Hype score
Not currently trending

  1. 【リンク集：12月20日〜23日のセキュリティ関連ニュース/記事】 ＜脆弱性＞ ・ロックウェル製PowerMonitorの脆弱性、産業システムへのリモート攻撃を可能に（CVE-2024-12371、CVE-2024-12372他） https://t.co/W6cok1X881… https://t.co/c6naTnFhWr

    @MachinaRecord

    23 Dec 2024

    151 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. Critical Flaws in Rockwell Automation PowerMonitor 1000 Devices: CVSS Scores Hit 9.8/10 Protect your Rockwell Automation PowerMonitor 1000 devices from critical flaws CVE-2024-12371, CVE-2024-12372, and CVE-2024-12373. Learn how to secure your systems https://t.co/hbJUfZ6L0o

    @the_yellow_fall

    21 Dec 2024

    304 Impressions

    1 Retweet

    4 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  3. CVE-2024-12372 A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of … https://t.co/M6sGm19C3M

    @CVEnew

    18 Dec 2024

    266 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. [CVE-2024-12372: CRITICAL] Rockwell Automation Power Monitor 1000 has a critical vulnerability leading to a heap memory corruption. This could result in remote code execution or denial-of-service attacks. #cybers...#cybersecurity,#vulnerability https://t.co/iWE0PyTtSW https://t.c

    @CveFindCom

    18 Dec 2024

    19 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References