CVE-2024-37369 HIGH

CVE-2024-37369: Rockwell Automation FactoryTalk® View SE Local Privilege Escalation Vulnerability via Local File Permissions

Vendor Rockwell Automation
Product FactoryTalk® View SE
Weakness CWE-732
Published June 14, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edit scripts, bypassing Access Control Lists, and potentially gaining further access within the system.

Key dates

02Disclosure timeline

June 14, 2024 CVE published
August 2, 2024 Record updated