CVE-2024-6435: fallo de gravedad alta en Rockwell Automation Pavilion8®
Rockwell Automation Privilege Escalation Vulnerability in Pavilion8®
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.7epss 0.5%
A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privileges to access functions which should only be available to users with administrative level privileges. If exploited, an attacker could read sensitive data, and create users. For example, a malicious user with basic privileges could perform critical functions such as creating a user with elevated privileges and reading sensitive information in the “views” section.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Rockwell Automation · Pavilion8®CVEs relacionadas — Rockwell Automation Pavilion8®
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-7961HIGHRockwell Automation Path Traversal Vulnerability in Pavilion8®EPSS 1.0%CVE-2024-7960HIGHRockwell Automation Incorrect Privileges and Path Traversal Vulnerability in Pavilion8®EPSS 0.5%CVE-2024-40620MEDIUMRockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocolEPSS 0.2%