Rockwell Automation Major nonrecoverable fault in 5015 – AENFTXT

Description

An input validation vulnerability exists in the Rockwell Automation 5015 - AENFTXT when a manipulated PTP packet is sent, causing the secondary adapter to result in a major nonrecoverable fault. If exploited, a power cycle is required to recover the product.

Scores

EPSS (exploitation in 30 days)

2.1% · top 18% of all CVEs (5 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: yes · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.7.

Weakness

• CWE-20: Improper Input Validation (opens in a new tab)All about CWE-20 and its CVEs

Affected products

• Rockwell Automation · 5015 - AENFTXT

  • affected v2.011

What to do

Solution: Customers using the affected software are encouraged to apply the risk mitigations, if possible. * Update to the corrected firmware revision, v2.012. * For information on how to mitigate Security Risks on industrial automation control systems, we encourage customers to implement our suggested security best practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight  to minimize the risk of the vulnerability.

References (1)

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1680.html (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-6089](https://trackcve.app/badge/CVE-2024-6089.svg)](https://trackcve.app/cve/CVE-2024-6089)

Record last updated 1 Aug 2024, 21:33 UTC.