CVE-2023-2423: Rockwell Automation Armor PowerFlex Vulnerable to Denial-Of-Service
First published: Tue Aug 08 2023(Updated: )
A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors could exploit this vulnerability by sending an influx of network commands, causing the product to generate an influx of event log traffic at a high rate. If exploited, the product would stop normal operations and self-reset creating a denial-of-service condition. The error code would need to be cleared prior to resuming normal operations.
Credit: PSIRT@rockwellautomation.com PSIRT@rockwellautomation.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rockwellautomation Armor Powerflex Firmware | <=1.003 | |
| Rockwellautomation Armor Powerflex |
Remedy
Update firmware to version 2.001 or later
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-2423?
CVE-2023-2423 is a vulnerability discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log.
How can threat actors exploit CVE-2023-2423?
Threat actors can exploit CVE-2023-2423 by sending an influx of network commands, causing the product to generate an influx of event log traffic.
What is the severity of CVE-2023-2423?
CVE-2023-2423 has a severity rating of 7.5 (high).
Which software is affected by CVE-2023-2423?
The Rockwell Automation Armor PowerFlex firmware up to and including version 1.003 is affected by CVE-2023-2423.
How can I fix CVE-2023-2423?
To fix CVE-2023-2423, users should apply the necessary security patches or firmware updates provided by Rockwell Automation.
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/severity
- agent/title
- agent/last-modified-date
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/rockwellautomation
- canonical/rockwellautomation armor powerflex firmware
- version/rockwellautomation armor powerflex firmware/1.003
- canonical/rockwellautomation armor powerflex