CVE-2024-8533 — Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions

CVE-2024-8533

Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions PUBLISHED

Description (CNA)

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / 2800C OptixPanel™ Compact	affected 4.0.0.325
Rockwell Automation / 2800S OptixPanel™ Standard	affected 4.0.0.350
Rockwell Automation / Embedded Edge Compute Module	affected 4.0.0.347

CWE

CWE-269

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1964.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.