CVE-2024-2424 - OpenCVE

An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://www.rockwellautomation.com/en-us/support/advisory.SD1667.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: Rockwell

Published: 2024-04-15T21:26:20.115Z

Updated: 2024-08-01T19:11:53.521Z

Reserved: 2024-03-13T14:41:51.983Z

Link: CVE-2024-2424

Vulnrichment

Updated: 2024-08-01T19:11:53.521Z

NVD

Status : Awaiting Analysis

Published: 2024-04-15T22:15:08.657

Modified: 2024-04-16T13:24:07.103

Link: CVE-2024-2424

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-2424", "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0", "state": "PUBLISHED", "assignerShortName": "Rockwell", "dateReserved": "2024-03-13T14:41:51.983Z", "datePublished": "2024-04-15T21:26:20.115Z", "dateUpdated": "2024-08-01T19:11:53.521Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "5015-AENFTXT", "vendor": "Rockwell Automation ", "versions": [{"status": "affected", "version": "v35"}]}], "datePublic": "2024-04-11T13:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\n<span style=\"background-color: rgb(255, 255, 255);\">An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability. </span>\n\n"}], "value": "\nAn input validation vulnerability exists in the Rockwell Automation\u00a05015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability. \n\n"}], "impacts": [{"capecId": "CAPEC-28", "descriptions": [{"lang": "en", "value": "CAPEC-28 Fuzzing"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "b73dd486-f505-4403-b634-40b078b177f0", "shortName": "Rockwell", "dateUpdated": "2024-04-15T21:26:20.115Z"}, "references": [{"url": "https://www.rockwellautomation.com/en-us/support/advisory.SD1667.html"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\n<p>Update the <span style=\"background-color: rgb(255, 255, 255);\">v2.12.</span></p><p>Users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.  </p><ul><li><p><a target=\"_blank\" rel=\"nofollow\" href=\"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight\">Security Best Practices</a> </p></li></ul>"}], "value": "\nUpdate the\u00a0v2.12.\n\nUsers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible. \u00a0\n\n * Security Best Practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight \u00a0\n\n"}], "source": {"discovery": "INTERNAL"}, "title": "Rockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable Fault", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-2424", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-19T17:11:22.359775Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:rockwellautomation:5015_aenftxt:v35:*:*:*:*:*:*:*"], "vendor": "rockwellautomation", "product": "5015_aenftxt", "versions": [{"status": "affected", "version": "v35"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:29:58.099Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:11:53.521Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.rockwellautomation.com/en-us/support/advisory.SD1667.html", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.rockwellautomation.com/en-us/support/advisory.SD1667.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:11:53.521Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-2424", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-19T17:11:22.359775Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:rockwellautomation:5015_aenftxt:v35:*:*:*:*:*:*:*"], "vendor": "rockwellautomation", "product": "5015_aenftxt", "versions": [{"status": "affected", "version": "v35"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-04-19T17:14:54.464Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "Rockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable Fault", "source": {"discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-28", "descriptions": [{"lang": "en", "value": "CAPEC-28 Fuzzing"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Rockwell Automation ", "product": "5015-AENFTXT", "versions": [{"status": "affected", "version": "v35"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "\nUpdate the\u00a0v2.12.\n\nUsers using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible. \u00a0\n\n * Security Best Practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight \u00a0\n\n", "supportingMedia": [{"type": "text/html", "value": "\n\n<p>Update the <span style=\"background-color: rgb(255, 255, 255);\">v2.12.</span></p><p>Users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.  </p><ul><li><p><a target=\"_blank\" rel=\"nofollow\" href=\"https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight\">Security Best Practices</a> </p></li></ul>", "base64": false}]}], "datePublic": "2024-04-11T13:00:00.000Z", "references": [{"url": "https://www.rockwellautomation.com/en-us/support/advisory.SD1667.html"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "\nAn input validation vulnerability exists in the Rockwell Automation\u00a05015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability. \n\n", "supportingMedia": [{"type": "text/html", "value": "\n\n<span style=\"background-color: rgb(255, 255, 255);\">An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability. </span>\n\n", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "b73dd486-f505-4403-b634-40b078b177f0", "shortName": "Rockwell", "dateUpdated": "2024-04-15T21:26:20.115Z"}}}, "cveMetadata": {"cveId": "CVE-2024-2424", "state": "PUBLISHED", "dateUpdated": "2024-08-01T19:11:53.521Z", "dateReserved": "2024-03-13T14:41:51.983Z", "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0", "datePublished": "2024-04-15T21:26:20.115Z", "assignerShortName": "Rockwell"}, "dataVersion": "5.1"}