CVSS 4.0
7.7 highCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NCVE-2024-8533
High (7.7) in rockwellautomation. EPSS 1.3% chance of exploitation in the next 30 days.
A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.
Severity
CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-276, CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- rockwellautomation:2800c_optixpanel_compact_firmware
- rockwellautomation:2800s_optixpanel_standard_firmware
- rockwellautomation:embedded_edge_compute_module_firmware