Vulnerability · Published Aug 14, 2024 · Assigned by Rockwell
CVE-2024-7513Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions
High 8.5
In plain English
A high-severity incorrect permission assignment in FactoryTalk View Site Edition from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities).
Severity (CVSS 4.0)8.5High
Exploit odds (30 days)1.7%top 23.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | FactoryTalk View Site Edition | 13.0 |
Weakness: CWE-732 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N