Log in Start free

Vulnerability · Published Aug 8, 2023 · Assigned by Rockwell

CVE-2023-2423Rockwell Automation Armor PowerFlex Vulnerable to Denial-Of-Service

High 8.6

In plain English

A high-severity security flaw in Armor PowerFlex from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).

Severity (CVSS 3.1)8.6High
Exploit odds (30 days)1.2%top 31.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors could exploit this vulnerability by sending an influx of network commands, causing the product to generate an influx of event log traffic at a high rate. If exploited, the product would stop normal operations and self-reset creating a denial-of-service condition. The error code would need to be cleared prior to resuming normal operations.

Affected products (as reported)

VendorProductVersions
Rockwell Automation Armor PowerFlex <=1.003

Weakness: CWE-682 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References