Vulnerability · Published Aug 13, 2024 · Assigned by Rockwell
CVE-2024-7567Rockwell Automation Micro850/870 Vulnerable to denial-of-service Vulnerability via CIP/Modbus Port
Medium 6.9
In plain English
A medium-severity uncontrolled resource consumption in PLC - Micro850/870 (2080 -L50E/2080 -L70E) from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS 4.0)6.9Medium
Exploit odds (30 days)0.5%top 54.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 (2080 -L50E/2080 -L70E). If exploited, the CIP/Modbus communication may be disrupted for short duration.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | PLC - Micro850/870 (2080 -L50E/2080 -L70E) | v20.011 |
Weakness: CWE-400 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N