CVE-2024-7513CWE-732

Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions

High · published August 14, 2024

CVSS v4.0
8.5
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

CVE-2024-7513 IMPACT

A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01656 · 76.4th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-08-14T19:48Z
EPSS history
Timeline
  • 14 AUG 19:48Z
    Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions
    cvelistv5