CVE-2024-9412 — Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Manager

CVE-2024-9412

Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Manager PUBLISHED

Description (CNA)

An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthorized user to sign in. While removal of all role mappings is unlikely, it could occur in the case of unexpected or accidental removal by the administrator. If exploited, an unauthorized user could access data they previously but should no longer have access to.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / Verve® Asset Manager	affected All versions < 1.38

CWE

CWE-842

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201704.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.