high8.8
CVE-2024-8533
A privilege escalation vulnerability exists in the Rockwell Automation affected products.
Impact
A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockwellautomation | 2800c Optixpanel Compact Firmware | from 4.0.0.325 before 4.0.2.116 |
| Rockwellautomation | 2800s Optixpanel Standard Firmware | from 4.0.0.350 before 4.0.2.123 |
| Rockwellautomation | Embedded Edge Compute Module Firmware | from 4.0.0.347 before 4.0.2.106 |