Vulnerability Description
CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Compactlogix 5380 Firmware | >= 28.011, < 34.014 |
| Rockwellautomation | Compactlogix 5380 | - |
| Rockwellautomation | Controllogix 5580 Firmware | >= 28.011, < 34.014 |
| Rockwellautomation | Controllogix 5580 | - |
| Rockwellautomation | Guardlogix 5580 Firmware | >= 31.011, < 34.014 |
| Rockwellautomation | Guardlogix 5580 | - |
| Rockwellautomation | Compact Guardlogix 5380 Sil 2 Firmware | >= 31.011, < 34.014 |
| Rockwellautomation | Compact Guardlogix 5380 Sil 2 | - |
| Rockwellautomation | Compact Guardlogix 5380 Sil 3 Firmware | >= 32.013, < 34.014 |
| Rockwellautomation | Compact Guardlogix 5380 Sil 3 | - |
| Rockwellautomation | Compactlogix 5480 Firmware | >= 32.011, < 34.014 |
| Rockwellautomation | Compactlogix 5480 | - |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2024-7507?
CVE-2024-7507 is a vulnerability with a CVSS score of 6.5 (MEDIUM). CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller.
How severe is CVE-2024-7507?
CVE-2024-7507 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-7507?
Check the references section above for vendor advisories and patch information. Affected products include: Rockwellautomation Compactlogix 5380 Firmware, Rockwellautomation Compactlogix 5380, Rockwellautomation Controllogix 5580 Firmware, Rockwellautomation Controllogix 5580, Rockwellautomation Guardlogix 5580 Firmware.