CVE-2024-6435

Rockwell Automation Privilege Escalation Vulnerability in Pavilion8®

State
Published
Severity
8.7 High
Published
Jul 16, 2024
Updated
Aug 27, 2025
Reserved
Jul 1, 2024

Read the record on cve.org

Description

A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privileges to access functions which should only be available to users with administrative level privileges. If exploited, an attacker could read sensitive data, and create users. For example, a malicious user with basic privileges could perform critical functions such as creating a user with elevated privileges and reading sensitive information in the “views” section.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NRockwell

Weaknesses

  • CWE-732 Incorrect Permission Assignment for Critical Resource

Affected Products

ProductVersions
Pavilion8®Rockwell Automation
  • 5.15.00Affected
  • 5.15.01Affected
  • 5.16.00Affected
  • 5.17.00Affected
  • 5.17.01Affected
  • 5.20.00Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.