CVE-2024-21915

Katalog CVE

CVSS 8.8 · High EPSS 0,99%

Kerentanan Incorrect Permission Assignment for Critical Resource pada rockwellautomation factorytalk services platform. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A threat actor could potentially read and modify sensitive data, delete data and render the FTSP system unavailable.

Rincian

Terbit di NVD

16 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,99% peluang dieksploitasi; lebih tinggi dari 61,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.rockwellautomation.com/en-us/support/advisory.SD1662.html broken link · advisory vendor