5015-aenftxt Firmware CVEs and Security Vulnerabilities

CVE-2024-2424

Rockwell Automation Input/Output Device Vulnerable to Major Nonrecoverable Fault

An input validation vulnerability exists in the Rockwell Automation 5015-AENFTXT that causes the secondary adapter to result in a major nonrecoverable fault (MNRF) when malicious input is entered. If exploited, the availability of the device will be impacted, and a manual restart is required. Additionally, a malformed PTP packet is needed to exploit this vulnerability.

CVSS 3.1 · 7.5 High EPSS 2.6% KEV · Not listed

Vendors

Rockwellautomation

Products

5015-aenftxt 5015-aenftxt Firmware

CVE-2024-6089

Rockwell Automation Major nonrecoverable fault in 5015 – AENFTXT

An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent, causing the secondary adapter to result in a major nonrecoverable fault. If exploited, a power cycle is required to recover the product.

CVSS 4.0 · 8.7 High EPSS 2.1% KEV · Not listed