« Volver al listado

CVE-2024-6435

Estado: AnalizadaAlta (8.7)—

A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privileges to access functions which should only be available to users with administrative level privileges. If exploited, an attacker could read sensitive data, and create users. For example, a malicious user with basic privileges could perform critical functions such as creating a user with elevated privileges and reading sensitive information in the “views” section.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Rockwellautomation — Pavilion8

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-6435",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-6435",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-19T17:34:09.109500Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "PSIRT@rockwellautomation.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 8.7,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT@rockwellautomation.com",
      "affectedData": [
        {
          "vendor": "Rockwell Automation",
          "product": "Pavilion8®",
          "versions": [
            {
              "status": "affected",
              "version": "5.15.00"
            },
            {
              "status": "affected",
              "version": "5.15.01"
            },
            {
              "status": "affected",
              "version": "5.16.00"
            },
            {
              "status": "affected",
              "version": "5.17.00"
            },
            {
              "status": "affected",
              "version": "5.17.01"
            },
            {
              "status": "affected",
              "version": "5.20.00"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-07-16T13:15:13.630",
  "references": [
    {
      "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1681.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT@rockwellautomation.com"
    },
    {
      "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1681.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "PSIRT@rockwellautomation.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privileges to access functions which should only be available to users with administrative level privileges. If exploited, an attacker could read sensitive data, and create users. For example, a malicious user with basic privileges could perform critical functions such as creating a user with elevated privileges and reading sensitive information in the “views” section."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de escalada de privilegios en los productos afectados que podría permitir que un usuario malintencionado con privilegios básicos acceda a funciones que sólo deberían estar disponibles para usuarios con privilegios de nivel administrativo. Si se explota, un atacante podría leer datos confidenciales y crear usuarios. Por ejemplo, un usuario malintencionado con privilegios básicos podría realizar funciones críticas, como crear un usuario con privilegios elevados y leer información confidencial en la sección \"vistas\"."
    }
  ],
  "lastModified": "2026-06-17T08:18:00.477",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:rockwellautomation:pavilion8:5.15.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49331A31-6BB8-418C-9500-AA58346FB5FC"
            },
            {
              "criteria": "cpe:2.3:a:rockwellautomation:pavilion8:5.15.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEDB0C95-55EE-42E6-807C-2FB531485014"
            },
            {
              "criteria": "cpe:2.3:a:rockwellautomation:pavilion8:5.16.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B644F6C8-003F-4A6B-B2EA-B8B7E49FAE00"
            },
            {
              "criteria": "cpe:2.3:a:rockwellautomation:pavilion8:5.17.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F09395B-E691-43A1-A7DC-E6240BD9776C"
            },
            {
              "criteria": "cpe:2.3:a:rockwellautomation:pavilion8:5.17.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53E846B6-1E6F-4E62-8683-FD805040B73E"
            },
            {
              "criteria": "cpe:2.3:a:rockwellautomation:pavilion8:5.20.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F95BB706-D8F0-45DE-85CC-791D3C4D1AAB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "PSIRT@rockwellautomation.com"
}