High severity7.5NVD Advisory· Published Oct 8, 2024· Updated Jun 17, 2026

CVE-2024-8626

Description

Due to a memory leak, a denial-of-service vulnerability exists in the Rockwell Automation affected products. A malicious actor could exploit this vulnerability by performing multiple actions on certain web pages of the product causing the affected products to become fully unavailable and require a power cycle to recover.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rockwellautomation/1756 En4tr Firmware
cpe:2.3:o:rockwellautomation:1756-en4tr_firmware:3.002:*:*:*:*:*:*:*
Rockwellautomation/Compact Guardlogix 5380 Firmware
cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:*:*:*:*:*:*:*:*
Range: >=33.011,<33.015
Rockwellautomation/Compactlogix 5380 Firmware
cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:*:*:*:*:*:*:*:*
Range: >=33.011,<33.015
Rockwellautomation/Compactlogix 5480 Firmware
cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:*:*:*:*:*:*:*:*
Range: >=33.011,<33.015
Rockwellautomation/ControlLogix 5580
cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:*:*:*:*:*:*:*:*
Range: >=33.011,<33.015
Rockwellautomation/Guardlogix 5580 Firmware
cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:*:*:*:*:*:*:*:*
Range: >=33.011,<33.015
Rockwellautomation/Rockwell Automation affected productsllm-create
Rockwellautomation/1756-EN4TRcpe-rescue
Range: v3.002
Rockwellautomation/Guardlogix Controllerscpe-rescue2 versions
v33.011<+ 1 more
- (no CPE)range: v33.011<
- (no CPE)range: v33.011<
Rockwellautomation/Compactlogix Controllerscpe-rescue2 versions
v33.011 <+ 1 more
- (no CPE)range: v33.011 <
- (no CPE)range: v33.011<

Patches

Vulnerability mechanics

References

www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1706.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000