8.8
High
CVE-2024-7960 The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive…
Description
The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive information and change settings. The vulnerability exists due to having an incorrect privilege matrix that allows users to have access to functions they should not.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Pavilion8® 5.20 | earliest → < 5.20 | 5.20 |
| pavilion8 5.20 | earliest → < 5.20 | 5.20 |
Other CVEs of Pavilion8®
The 4 CVEs of Pavilion8® →
CVE-2024-7961
A path traversal vulnerability exists in the Rockwell Automation affected product
8.6
High
CVE-2024-40620
CVE-2024-40620 IMPACT
A vulnerability exists in the affected product due to lack of encryption of sensitive information
5.3
Medium
CVE-2024-6435
A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic…
8.7
High