CVE-2024-7515

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7515", "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0", "state": "PUBLISHED", "assignerShortName": "Rockwell", "dateReserved": "2024-08-05T20:19:29.235Z", "datePublished": "2024-08-14T19:40:20.990Z", "dateUpdated": "2024-08-14T19:59:57.056Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "CompactLogix 5380 (5069-L3z)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "ControlLogix\u00ae 5580 (1756- L8z)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "GuardLogix 5580 (1756- L8zS)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "Compact GuardLogix 5380 (5069 \u2013 L3zS2)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "CompactLogix 5480 (5069-L4)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}], "datePublic": "2024-08-13T13:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p><b><u>CVE-2024-7515 IMPACT</u></b></p><p>A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.</p>"}], "value": "CVE-2024-7515 IMPACT\n\nA denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller."}], "impacts": [{"capecId": "CAPEC-153", "descriptions": [{"lang": "en", "value": "CAPEC-153 Input Data Manipulation"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 8.7, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "b73dd486-f505-4403-b634-40b078b177f0", "shortName": "Rockwell", "dateUpdated": "2024-08-14T19:40:20.990Z"}, "references": [{"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201686.html"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Upgrade to:&nbsp;\n\n<span style=\"background-color: rgb(255, 255, 255);\">v36.011, v35.013, v34.014</span>"}], "value": "Upgrade to:\u00a0\n\nv36.011, v35.013, v34.014"}], "source": {"discovery": "INTERNAL"}, "title": "Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix\u00ae 5380 Controller Denial-of-Service Vulnerability via Input Validation", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>If PTP messages are not used, block at the network level, port UDP 319/320</p>"}], "value": "If PTP messages are not used, block at the network level, port UDP 319/320"}], "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "rockwellautomation", "product": "compactlogix_5380_firmware", "cpes": ["cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:v28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "v28.011", "status": "affected"}]}, {"vendor": "rockwellautomation", "product": "controllogix_5580_firmware", "cpes": ["cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "v28.011", "status": "affected"}]}, {"vendor": "rockwellautomation", "product": "guardlogix_5580_firmware", "cpes": ["cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "28.011", "status": "affected"}]}, {"vendor": "rockwellautomation", "product": "compact_guardlogix_5380_firmware", "cpes": ["cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "28.011", "status": "affected"}]}, {"vendor": "rockwellautomation", "product": "compactlogix_5480_firmware", "cpes": ["cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "28.011", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-14T19:54:17.968076Z", "id": "CVE-2024-7515", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T19:59:57.056Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7515", "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0", "state": "PUBLISHED", "assignerShortName": "Rockwell", "dateReserved": "2024-08-05T20:19:29.235Z", "datePublished": "2024-08-14T19:40:20.990Z", "dateUpdated": "2024-08-14T19:59:57.056Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "CompactLogix 5380 (5069-L3z)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "ControlLogix\u00ae 5580 (1756- L8z)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "GuardLogix 5580 (1756- L8zS)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "Compact GuardLogix 5380 (5069 \u2013 L3zS2)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "CompactLogix 5480 (5069-L4)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}], "datePublic": "2024-08-13T13:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p><b><u>CVE-2024-7515 IMPACT</u></b></p><p>A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.</p>"}], "value": "CVE-2024-7515 IMPACT\n\nA denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller."}], "impacts": [{"capecId": "CAPEC-153", "descriptions": [{"lang": "en", "value": "CAPEC-153 Input Data Manipulation"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 8.7, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "b73dd486-f505-4403-b634-40b078b177f0", "shortName": "Rockwell", "dateUpdated": "2024-08-14T19:40:20.990Z"}, "references": [{"url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201686.html"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Upgrade to:&nbsp;\n\n<span style=\"background-color: rgb(255, 255, 255);\">v36.011, v35.013, v34.014</span>"}], "value": "Upgrade to:\u00a0\n\nv36.011, v35.013, v34.014"}], "source": {"discovery": "INTERNAL"}, "title": "Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix\u00ae 5380 Controller Denial-of-Service Vulnerability via Input Validation", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>If PTP messages are not used, block at the network level, port UDP 319/320</p>"}], "value": "If PTP messages are not used, block at the network level, port UDP 319/320"}], "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-7515", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-14T19:54:17.968076Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:v28.011:*:*:*:*:*:*:*"], "vendor": "rockwellautomation", "product": "compactlogix_5380_firmware", "versions": [{"status": "affected", "version": "v28.011"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.011:*:*:*:*:*:*:*"], "vendor": "rockwellautomation", "product": "controllogix_5580_firmware", "versions": [{"status": "affected", "version": "v28.011"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:28.011:*:*:*:*:*:*:*"], "vendor": "rockwellautomation", "product": "guardlogix_5580_firmware", "versions": [{"status": "affected", "version": "28.011"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:28.011:*:*:*:*:*:*:*"], "vendor": "rockwellautomation", "product": "compact_guardlogix_5380_firmware", "versions": [{"status": "affected", "version": "28.011"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:28.011:*:*:*:*:*:*:*"], "vendor": "rockwellautomation", "product": "compactlogix_5480_firmware", "versions": [{"status": "affected", "version": "28.011"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T19:59:46.026Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "CompactLogix 5380 (5069-L3z)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "ControlLogix\u00ae 5580 (1756- L8z)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "GuardLogix 5580 (1756- L8zS)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "Compact GuardLogix 5380 (5069 \u2013 L3zS2)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}, {"defaultStatus": "unaffected", "product": "CompactLogix 5480 (5069-L4)", "vendor": "Rockwell Automation", "versions": [{"status": "affected", "version": "28.011"}]}], "source": "PSIRT@rockwellautomation.com"}, {"affectedData": [{"cpes": ["cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:v28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "compactlogix_5380_firmware", "vendor": "rockwellautomation", "versions": [{"status": "affected", "version": "v28.011"}]}, {"cpes": ["cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:v28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "controllogix_5580_firmware", "vendor": "rockwellautomation", "versions": [{"status": "affected", "version": "v28.011"}]}, {"cpes": ["cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "guardlogix_5580_firmware", "vendor": "rockwellautomation", "versions": [{"status": "affected", "version": "28.011"}]}, {"cpes": ["cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_firmware:28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "compact_guardlogix_5380_firmware", "vendor": "rockwellautomation", "versions": [{"status": "affected", "version": "28.011"}]}, {"cpes": ["cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:28.011:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "compactlogix_5480_firmware", "vendor": "rockwellautomation", "versions": [{"status": "affected", "version": "28.011"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AABBF4EF-9F0E-432D-A535-F74402CFD05D", "versionEndExcluding": "34.014", "versionStartIncluding": "28.011", "vulnerable": true}, {"criteria": "cpe:2.3:o:rockwellautomation:compactlogix_5380_firmware:35.011:*:*:*:*:*:*:*", "matchCriteriaId": "305CDBFF-404A-45F5-A391-1B18F446D1B8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDD040ED-B44C-47D0-B4D4-729C378C4F68", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E5B18F7F-80AB-4146-9D65-B1DB4C2FAA8D", "versionEndExcluding": "34.014", "versionStartIncluding": "28.011", "vulnerable": true}, {"criteria": "cpe:2.3:o:rockwellautomation:controllogix_5580_firmware:35.011:*:*:*:*:*:*:*", "matchCriteriaId": "A29D3775-CAB3-45CF-96CE-71D0672C7E37", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*", "matchCriteriaId": "51BB883B-B863-4D57-B1C0-FC7B3EBD1EA0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC2E9A2F-AFC7-442D-88FC-C3217ABB560E", "versionEndExcluding": "34.014", "versionStartIncluding": "31.011", "vulnerable": true}, {"criteria": "cpe:2.3:o:rockwellautomation:guardlogix_5580_firmware:35.011:*:*:*:*:*:*:*", "matchCriteriaId": "64CAC9B1-19E5-44BB-B814-DDA98B7290E4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:rockwellautomation:guardlogix_5580:-:*:*:*:*:*:*:*", "matchCriteriaId": "006B7683-9FDF-4748-BA28-2EA22613E092", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil_2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "560A9F50-DBCF-48CF-856B-BE061C490697", "versionEndExcluding": "34.014", "versionStartIncluding": "31.011", "vulnerable": true}, {"criteria": "cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil_2_firmware:35.011:*:*:*:*:*:*:*", "matchCriteriaId": "F7A5DA9B-E1CA-45FF-8A9B-60B1E506F981", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:rockwellautomation:compact_guardlogix_5380_sil_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E594CDF6-0582-4D5C-B6AA-C8A2E752E29F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil_3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3631A2E0-00BA-4DF2-94C2-6906B9A3E941", "versionEndExcluding": "34.014", "versionStartIncluding": "32.013", "vulnerable": true}, {"criteria": "cpe:2.3:o:rockwellautomation:compact_guardlogix_5380_sil_3_firmware:35.011:*:*:*:*:*:*:*", "matchCriteriaId": "ABE90277-EB8A-4ECE-A573-C1814F35CB47", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:rockwellautomation:compact_guardlogix_5380_sil_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "B82D842C-0930-41AA-83CD-5F235771AE4B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C025589-66EE-40EF-8CE6-9A7B76D74BF4", "versionEndExcluding": "34.014", "versionStartIncluding": "32.011", "vulnerable": true}, {"criteria": "cpe:2.3:o:rockwellautomation:compactlogix_5480_firmware:35.011:*:*:*:*:*:*:*", "matchCriteriaId": "61F8EA3B-C51C-4CB1-9BB3-017577DC6684", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:rockwellautomation:compactlogix_5480:-:*:*:*:*:*:*:*", "matchCriteriaId": "80F4F5BE-07DF-402A-BF98-34FBA6A11968", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "CVE-2024-7515 IMPACT\n\nA denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller."}, {"lang": "es", "value": "CVE-2024-7515 IMPACT Existe una vulnerabilidad de denegaci\u00f3n de servicio en los productos afectados. Un paquete de administraci\u00f3n PTP con formato incorrecto puede causar un fallo importante no recuperable en el controlador."}], "id": "CVE-2024-7515", "lastModified": "2026-06-17T08:20:21.240", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "PSIRT@rockwellautomation.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-7515", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-08-14T19:54:17.968076Z", "version": "2.0.3"}}]}, "published": "2024-08-14T20:15:13.150", "references": [{"source": "PSIRT@rockwellautomation.com", "tags": ["Vendor Advisory"], "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201686.html"}], "sourceIdentifier": "PSIRT@rockwellautomation.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "PSIRT@rockwellautomation.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}