Rockwell Automation OptixPanel

Summary

Vulnerabilities 1

• High 7.7
  CVE-2024-8533

  Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions

  A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.

  Rockwell Automation 2800S OptixPanel™ Standard 2800C OptixPanel™ Compact Embedded Edge Compute Module Browsers ICS / OT
  Sep 12, 2024

Revision history

1. 2024-09-12 #1

   Initial Publication

References

• ICSA Advisory ICSA-24-256-19 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-19
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B