Auth bypass in Rockwell Automation Pm1k 1408-Bc3a-485
CVE-2024-12371
A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit operations, creating admin users and performing factory reset.
Vulnerability class: Broken Authentication
EPSS: 0.005 (42.8th percentile) — read the EPSS interpretation.
Affected products
- Rockwell Automation Pm1k 1408-bc3a-485 — versions <4.020
- Rockwell Automation Pm1k 1408-bc3a-ent — versions <4.020
- Rockwell Automation Pm1k 1408-em1a-485 — versions <4.020
- Rockwell Automation Pm1k 1408-em1a-ent — versions <4.020
- Rockwell Automation Pm1k 1408-em2a-485 — versions <4.020
- Rockwell Automation Pm1k 1408-em2a-ent — versions <4.020
- Rockwell Automation Pm1k 1408-em3a-485 — versions <4.020
- Rockwell Automation Pm1k 1408-em3a-ent — versions <4.020
- Rockwell Automation Pm1k 1408-tr1a-485 — versions <4.020
- Rockwell Automation Pm1k 1408-tr1a-ent — versions <4.020