A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit operations, creating admin users and performing factory reset.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
PM1k 1408-BC3A-485
Vendor
Rockwell Automation
Product
PM1k 1408-BC3A-485
Platforms
Unknown
Default status
unaffected
PM1k 1408-BC3A-485 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-BC3A-ENT
Vendor
Rockwell Automation
Product
PM1k 1408-BC3A-ENT
Platforms
Unknown
Default status
unaffected
PM1k 1408-BC3A-ENT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-TS3A-485
Vendor
Rockwell Automation
Product
PM1k 1408-TS3A-485
Platforms
Unknown
Default status
unaffected
PM1k 1408-TS3A-485 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-TS3A-ENT
Vendor
Rockwell Automation
Product
PM1k 1408-TS3A-ENT
Platforms
Unknown
Default status
unaffected
PM1k 1408-TS3A-ENT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-EM3A-485
Vendor
Rockwell Automation
Product
PM1k 1408-EM3A-485
Platforms
Unknown
Default status
unaffected
PM1k 1408-EM3A-485 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-EM3A-ENT
Vendor
Rockwell Automation
Product
PM1k 1408-EM3A-ENT
Platforms
Unknown
Default status
unaffected
PM1k 1408-EM3A-ENT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-TR1A-485
Vendor
Rockwell Automation
Product
PM1k 1408-TR1A-485
Platforms
Unknown
Default status
unaffected
PM1k 1408-TR1A-485 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-TR2A-485
Vendor
Rockwell Automation
Product
PM1k 1408-TR2A-485
Platforms
Unknown
Default status
unaffected
PM1k 1408-TR2A-485 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<v4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-EM1A-485
Vendor
Rockwell Automation
Product
PM1k 1408-EM1A-485
Platforms
Unknown
Default status
unaffected
PM1k 1408-EM1A-485 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-EM2A-485
Vendor
Rockwell Automation
Product
PM1k 1408-EM2A-485
Platforms
Unknown
Default status
unaffected
PM1k 1408-EM2A-485 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-TR1A-ENT
Vendor
Rockwell Automation
Product
PM1k 1408-TR1A-ENT
Platforms
Unknown
Default status
unaffected
PM1k 1408-TR1A-ENT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-TR2A-ENT
Vendor
Rockwell Automation
Product
PM1k 1408-TR2A-ENT
Platforms
Unknown
Default status
unaffected
PM1k 1408-TR2A-ENT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-EM1A-ENT
Vendor
Rockwell Automation
Product
PM1k 1408-EM1A-ENT
Platforms
Unknown
Default status
unaffected
PM1k 1408-EM1A-ENT · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
<4.020
affected
Unavailable
Unavailable
Unavailable
None listed
PM1k 1408-EM2A-ENT
Vendor
Rockwell Automation
Product
PM1k 1408-EM2A-ENT
Platforms
Unknown
Default status
unaffected
PM1k 1408-EM2A-ENT · Scoped product and version facts