CVE-2024-12372

A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for remote code execution or a denial-of-service attack.

CVSS

No CVSS.

References

Link	Resource
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1714.html

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de denegación de servicio y posible ejecución remota de código en Rockwell Automation Power Monitor 1000. La vulnerabilidad provoca la corrupción de la memoria del montón, lo que puede comprometer la integridad del sistema y permitir potencialmente la ejecución remota de código o un ataque de denegación de servicio.

18 Dec 2024, 20:15

Type	Values Removed	Values Added
CWE		CWE-94

18 Dec 2024, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-12-18 16:15

Updated : 2026-06-17 06:59

NVD link : CVE-2024-12372

Mitre link : CVE-2024-12372

CVE.ORG link : CVE-2024-12372

JSON object : View

Products Affected

No product.

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2024-12372", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-12372", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2024-12-18T19:57:17.324443Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "PSIRT@rockwellautomation.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "PSIRT@rockwellautomation.com", "affectedData": [{"vendor": "Rockwell Automation", "product": "PM1k 1408-BC3A-485", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-BC3A-ENT", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-TS3A-485", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-TS3A-ENT", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-EM3A-485", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-EM3A-ENT", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-TR1A-485", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-TR2A-485", "versions": [{"status": "affected", "version": "<v4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-EM1A-485", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-EM2A-485", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-TR1A-ENT", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-TR2A-ENT", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-EM1A-ENT", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}, {"vendor": "Rockwell Automation", "product": "PM1k 1408-EM2A-ENT", "versions": [{"status": "affected", "version": "<4.020"}], "defaultStatus": "unaffected"}]}], "published": "2024-12-18T16:15:11.050", "references": [{"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1714.html", "source": "PSIRT@rockwellautomation.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for remote code execution or a denial-of-service attack."}, {"lang": "es", "value": "Existe una vulnerabilidad de denegaci\u00f3n de servicio y posible ejecuci\u00f3n remota de c\u00f3digo en Rockwell Automation Power Monitor 1000. La vulnerabilidad provoca la corrupci\u00f3n de la memoria del mont\u00f3n, lo que puede comprometer la integridad del sistema y permitir potencialmente la ejecuci\u00f3n remota de c\u00f3digo o un ataque de denegaci\u00f3n de servicio."}], "lastModified": "2026-06-17T06:59:35.820", "sourceIdentifier": "PSIRT@rockwellautomation.com"}