Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-40620

Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

CVE-2024-40620 IMPACT A vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability results in data being sent between the Console and the Dashboard without encryption, which can be seen in the logs of proxy servers, potentially impacting the data's confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation Pavilion8®

Default version status: unaffected

  • 5.20affected

References