Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-8533

Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions

Description

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation 2800C OptixPanel™ Compact

Default version status: unaffected

  • 4.0.0.325affected

Rockwell Automation 2800S OptixPanel™ Standard

Default version status: unaffected

  • 4.0.0.350affected

Rockwell Automation Embedded Edge Compute Module

Default version status: unaffected

  • 4.0.0.347affected

References