PM1k 1408-TR1A-485 vulnerabilities
3 known vulnerabilities in PM1k 1408-TR1A-485 from Rockwell Automation. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.3 Critical severity
PM1k 1408-BC3A-485: Buffer Copy without Checking Size of Input
A denial-of-service vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in a buffer-overflow, potentially causing denial-of-service.
- 9.3 Critical severity
PM1k 1408-BC3A-485: Improper Control of Generation of Code
A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for rem
- 9.3 Critical severity
PM1k 1408-BC3A-485: Missing Authentication for Critical Functionality
A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit ope