{ "dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": { "cveId": "CVE-2024-8533", "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0", "state": "PUBLISHED", "assignerShortName": "Rockwell", "dateReserved": "2024-09-06T17:15:15.321Z", "datePublished": "2024-09-12T20:06:20.913Z", "dateUpdated": "2024-09-12T20:58:17.171Z" }, "containers": { "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "2800C OptixPanel™ Compact", "vendor": "Rockwell Automation", "versions": [ { "status": "affected", "version": "4.0.0.325" } ] }, { "defaultStatus": "unaffected", "product": "2800S OptixPanel™ Standard", "vendor": "Rockwell Automation", "versions": [ { "status": "affected", "version": "4.0.0.350" } ] }, { "defaultStatus": "unaffected", "product": "Embedded Edge Compute Module", "vendor": "Rockwell Automation", "versions": [ { "status": "affected", "version": "4.0.0.347" } ] } ], "datePublic": "2024-09-12T13:00:00.000Z", "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.

" } ], "value": "A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges." } ], "impacts": [ { "capecId": "CAPEC-122", "descriptions": [ { "lang": "en", "value": "CAPEC-122 Privilege Abuse" } ] } ], "metrics": [ { "cvssV4_0": { "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 7.7, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "orgId": "b73dd486-f505-4403-b634-40b078b177f0", "shortName": "Rockwell", "dateUpdated": "2024-09-12T20:06:20.913Z" }, "references": [ { "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1964.html" } ], "solutions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "


Affected Product

 

 

 

 

First Known in Software Version

 

 

 

 

Corrected in Software Version

 

 

 

 

2800C OptixPanel™ Compact

 

 

 

 

4.0.0.325

 

 

 

 

4.0.2.116

 

 

 

 

2800S OptixPanel™ Standard

 

 

 

 

4.0.0.350

 

 

 

 

4.0.2.123

 

 

 

 

Embedded Edge Compute Module

 

 

 

 

4.0.0.347

 

 

 

 

4.0.2.106

 


\n\n

Mitigations and Workarounds
Customers using the affected software are encouraged to apply security best practices

\n\n\n\n
" } ], "value": "Affected Product\n\n \n\n \n\n \n\n \n\nFirst Known in Software Version\n\n \n\n \n\n \n\n \n\nCorrected in Software Version\n\n \n\n \n\n \n\n \n\n2800C OptixPanel™ Compact\n\n \n\n \n\n \n\n \n\n4.0.0.325\n\n \n\n \n\n \n\n \n\n4.0.2.116\n\n \n\n \n\n \n\n \n\n2800S OptixPanel™ Standard\n\n \n\n \n\n \n\n \n\n4.0.0.350\n\n \n\n \n\n \n\n \n\n4.0.2.123\n\n \n\n \n\n \n\n \n\nEmbedded Edge Compute Module\n\n \n\n \n\n \n\n \n\n4.0.0.347\n\n \n\n \n\n \n\n \n\n4.0.2.106\n\n \n\n\n\n\nMitigations and Workarounds \nCustomers using the affected software are encouraged to apply security best practices\n\n * For information on how to mitigate Security Risks on industrial automation control systems, we encourage customers to implement our suggested security best practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight  to minimize the risk of the vulnerability." } ], "source": { "advisory": "SD1964", "discovery": "INTERNAL" }, "title": "Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions", "x_generator": { "engine": "Vulnogram 0.2.0" } }, "adp": [ { "affected": [ { "vendor": "rockwellautomation", "product": "2800c_optixpanel_compact", "cpes": [ "cpe:2.3:o:rockwellautomation:2800c_optixpanel_compact:4.0.0.325:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "versions": [ { "version": "4.0.0.325", "status": "affected" } ] }, { "vendor": "rockwellautomation", "product": "2800s_optixpanel_standard", "cpes": [ "cpe:2.3:o:rockwellautomation:2800s_optixpanel_standard:4.0.0.350:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "versions": [ { "version": "4.0.0.350", "status": "affected" } ] }, { "vendor": "rockwellautomation", "product": "embedded_edge_compute_module", "cpes": [ "cpe:2.3:o:rockwellautomation:embedded_edge_compute_module:4.0.0.347:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "versions": [ { "version": "4.0.0.347", "status": "affected" } ] } ], "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2024-09-12T20:17:47.897766Z", "id": "CVE-2024-8533", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-12T20:58:17.171Z" } } ] } }