Read the docs
TI-2024-05973 Aliases CVE-2024-6436GHSA-g2f6-cxmc-24cj

Rockwell Automation Input Validation Vulnerability exists in the SequenceManager™ Server

Priority MEDIUM 48CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

An input validation vulnerability exists in the Rockwell Automation Sequence Manager™ which could allow a malicious user to send malformed packets to the server and cause a denial-of-service condition. If exploited, the device would become unresponsive, and a manual restart will be required for recovery. Additionally, if exploited, there could be a loss of view for the downstream equipment sequences in the controller. Users would not be able to view the status or command the equipment sequences, however the equipment sequence would continue to execute uninterrupted.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02055 81st percentileScored 2026-11-07
Fix Fixed SequenceManager™ (Rockwell Automation): 2.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellSequenceManager™before 2.02.0Patch availableCNA
  • SequenceManager™ VendorRockwell Affected before 2.0 Fixed in 2.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:rockwellautomation:sequencemanager:*:*:*:*:*:*:*:*before 2.0VulnerableRockwell
  • cpe:2.3:a:rockwellautomation:sequencemanager:*:*:*:*:*:*:*:* Versions before 2.0 Vulnerable ·Rockwell

Remediation

  • Fix · CNA SequenceManager™ (Rockwell Automation) Fixed in 2.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-6436
  2. 2026-10-03 Alias added: GHSA-g2f6-cxmc-24cj

References

Sources