PT-2024-6591
CVE-2024-8533
·
Published
2024-09-12
·
Updated
2024-09-19
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Rockwell Automation products (affected versions not specified)
Description:
A privilege escalation issue exists due to improper default file permissions, allowing users to exfiltrate credentials and escalate privileges. This can be exploited by a remote attacker to gain user credentials and increase their privileges. The issue affects the management of graphical user interface software on industrial devices, including the Rockwell Automation 2800C OptixPanel Compact, 2800S OptixPanel Standard, and the Embedded Edge Compute Module.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾