Lucene search
HistorySep 12, 2024 - 9:15 p.m.
CVE-2024-7961
vulnerability
rockwell automation
arbitrary files
remote code execution
path traversal
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.4%
A path traversal vulnerability exists in the Rockwell Automation affected product. If exploited, the threat actor could upload arbitrary files to the server that could result in a remote code execution.
Affected configurations
Node
rockwellautomationpavilion8Range<6.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| rockwellautomation | pavilion8 | * | cpe:2.3:a:rockwellautomation:pavilion8:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-7961 Rockwell Automation Path Traversal Vulnerability in Pavilion8®
2024-09-12 20:26:42
cve
cve
CVE-2024-7961
2024-09-12 21:15:03
vulnrichment
vulnrichment
CVE-2024-7961 Rockwell Automation Path Traversal Vulnerability in Pavilion8®
2024-09-12 20:26:42
ics
ics
Rockwell Automation Pavilion8
2024-09-12 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.4%
Related for NVD:CVE-2024-7961