Description
A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | 2800C OptixPanel™ Compact | 4.0.0.325 | — |
| Rockwell Automation | 2800S OptixPanel™ Standard | 4.0.0.350 | — |
| Rockwell Automation | Embedded Edge Compute Module | 4.0.0.347 | — |
Advisories 1
- ICSA-24-256-19 Rockwell Automation OptixPanel CISA ICS & IT advisories · Sep 12, 2024