PT-2024-10277 · Rockwell Automation · Rockwell Automation Power Monitor 1000

Vera Mens · Published 2024-12-17 · Updated 2025-09-04 · CVE-2024-12372

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Rockwell Automation Power Monitor 1000 (affected versions not specified)

Description A denial-of-service and possible remote code execution vulnerability exists in Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory, which may compromise system integrity, potentially allowing for remote code execution or a denial-of-service attack. The vulnerability is related to a buffer overflow in dynamic memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Heap Based Buffer Overflow

Weakness Enumeration

CWE-94

CWE-122

Related Identifiers

BDU:2025-00683

CVE-2024-12372

Affected Products

Rockwell Automation Power Monitor 1000

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-12372 · Security Note
• https://bdu.fstec.ru/vul/2025-00683 · Security Note
• https://twitter.com/CVEnew/status/1869409825039266155 · Twitter Post
• https://twitter.com/Eth1calHackrZ/status/1872598310852362337 · Twitter Post
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1714.html · Note
• https://twitter.com/Eth1calHackrZ/status/1871982994921304528 · Twitter Post
• https://twitter.com/CveFindCom/status/1869405868501930178 · Twitter Post
• https://t.me/CyberSecurityTechnologies/12329 · Telegram Post
• https://twitter.com/ksg93rd/status/1963688199823466891 · Twitter Post
• https://t.me/cvedetector/13209 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1870285289597612446 · Twitter Post