Skip to content
OpenAdvisories
High ICSA-24-226-04 1 CVE

Rockwell Automation Pavilion8

Published Aug 13, 2024 · Updated Aug 13, 2024

Vendor: Rockwell Automation Product: Pavilion8®

Summary

Successful exploitation of this vulnerability could allow an attacker to view sensitive data due to a lack of encryption.

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-40620

    Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol

    CVE-2024-40620 IMPACT A vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability results in data being sent between the Console and the Dashboard without encryption, which can be seen in the logs of pr…

    Rockwell Automation Pavilion8® ICS / OT

Revision history

  1. #1

    Initial Publication

References