Skip to content
OpenAdvisories
High ICSA-23-257-07 1 CVE

Rockwell Automation Pavilion8

Published Sep 14, 2023 · Updated Sep 14, 2023

Vendor: Rockwell Automation Product: Pavilion8®

Summary

Successful exploitation of this vulnerability could allow an attacker to retrieve other user's sessions data.

Vulnerabilities 1

  • High 8.8
    CVE-2023-29463

    Pavilion8 Security Misconfiguration Vulnerability

    The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users out of their session.

    Rockwell Automation Pavilion8® ICS / OT

Revision history

  1. #1

    Initial Publication

References