CVE-2024-8533CWE-269

Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions

High · published September 12, 2024

CVSS v4.0
7.7
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01284 · 69.9th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-09-12T20:06Z
EPSS history
Timeline
  • 12 SEP 20:06Z
    Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions
    cvelistv5