EUVD-2026-69062
GHSA-mh24-4rcj-4gmj
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network-based DoS with no confidentiality or integrity impact; scope unchanged as only the local embedded web service is affected.
Primary rating from Vendor (Rockwell).
CVSS VectorVendor: Rockwell
Lifecycle Timeline
2DescriptionCVE.org
A denial-of-service security issue exists within ArmorStart® LT. The security issue stems from improper handling of a crafted HTTP PUT request sent to the embedded web server. This can result in a loss of web server availability
AnalysisAI
Rockwell Automation's ArmorStart LT industrial motor control device contains a denial-of-service flaw in its embedded web server, exploitable by sending a crafted HTTP PUT request with no authentication or special preconditions. The root cause (CWE-770) is improper resource throttling during HTTP PUT processing, which causes the web server to become unavailable. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The ArmorStart LT embedded web server must be network-reachable from the attacker's position - no authentication, no user interaction, and no special device configuration is required beyond network access to the HTTP service, as confirmed by the CVSS 4.0 vector (PR:N, UI:N, AC:L, AT:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VA:H) confirms a fully network-accessible, unauthenticated, low-complexity attack requiring no user interaction - the highest-risk attack surface profile for a DoS class vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult Rockwell Automation security advisory SD1797 at https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1797.html for vendor-confirmed patch availability and exact fix versions - an exact patched firmware version is not independently confirmed from the current intelligence data, so the advisory is the authoritative source. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all ArmorStart LT devices in your environment and assess their network accessibility; immediately implement firewall rules or network segmentation to block untrusted access to the web server management interface. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Armorstart Lt
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today