Rockwell Automation PM1K 1408-EM3A-485 vulnerabilities

3 CVEs affecting Rockwell Automation PM1K 1408-EM3A-485, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-12373, published 2024-12-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-12372, published 2024-12-18. Critical severity, CVSS 9.3. EPSS: 0.9% chance of exploitation in the next 30 days. A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may…
CVE-2024-12371, published 2024-12-18. Critical severity, CVSS 9.3. EPSS: 0.5% chance of exploitation in the next 30 days. A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any authentication via API.…
CVE-2024-12373, published 2024-12-18. Critical severity, CVSS 9.3. EPSS: 0.5% chance of exploitation in the next 30 days. A denial-of-service vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in a buffer-overflow, potentially causing denial-of-service.