CVE-2024-7960

Katalog CVE

CVSS 9.1 · Critical EPSS 0,45%

Kerentanan Improper Privilege Management pada rockwellautomation pavilion8. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive information and change settings. The vulnerability exists due to having an incorrect privilege matrix that allows users to have access to functions they should not.

Rincian

Terbit di NVD

12 September 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 37,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1695.html advisory vendor