VULNERABILITY INTELLIGENCE

CVE-2024-2424

CVSS score7.5 HIGH
EPSS probability2.61%
CISA KEVNot currently listed
Published2024-04-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability.

Weakness classification

  • PSIRT@rockwellautomation.com: CWE-20
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references