CVE-2024-40620CWE-311

Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol

Medium · published August 14, 2024

CVSS v4.0
5.3
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

CVE-2024-40620 IMPACT

A vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability results in data being sent between the Console and the Dashboard without encryption, which can be seen in the logs of proxy servers, potentially impacting the data's confidentiality.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00186 · 7.8th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2024-08-14T19:58Z
EPSS history
Timeline
  • 14 AUG 19:58Z
    Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol
    cvelistv5