Rockwell Automation Privilege Escalation Vulnerability in Pavilion8®
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
A privilege escalation vulnerability exists in the affected products which could allow a malicious user with basic privileges to access functions which should only be available to users with administrative level privileges. If exploited, an attacker could read sensitive data, and create users. For example, a malicious user with basic privileges could perform critical functions such as creating a user with elevated privileges and reading sensitive information in the “views” section.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Rockwell | Pavilion8® | 5.15.00; 5.15.01; 5.16.00; 5.17.00; 5.17.01; 5.20.00 | — | No fix listed | CNA |
- Pavilion8® VendorRockwell Affected 5.15.00; 5.15.01; 5.16.00; 5.17.00; 5.17.01; 5.20.00 Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:rockwellautomation:pavilion8:5.15.00:*:*:*:*:*:*:* | 5.15.00 | Vulnerable | Rockwell |
| cpe:2.3:a:rockwellautomation:pavilion8:5.15.01:*:*:*:*:*:*:* | 5.15.01 | Vulnerable | Rockwell |
| cpe:2.3:a:rockwellautomation:pavilion8:5.16.00:*:*:*:*:*:*:* | 5.16.00 | Vulnerable | Rockwell |
| cpe:2.3:a:rockwellautomation:pavilion8:5.17.00:*:*:*:*:*:*:* | 5.17.00 | Vulnerable | Rockwell |
| cpe:2.3:a:rockwellautomation:pavilion8:5.17.01:*:*:*:*:*:*:* | 5.17.01 | Vulnerable | Rockwell |
| cpe:2.3:a:rockwellautomation:pavilion8:5.20.00:*:*:*:*:*:*:* | 5.20.00 | Vulnerable | Rockwell |
- cpe:2.3:a:rockwellautomation:pavilion8:5.15.00:*:*:*:*:*:*:* Versions 5.15.00 Vulnerable ·Rockwell
- cpe:2.3:a:rockwellautomation:pavilion8:5.15.01:*:*:*:*:*:*:* Versions 5.15.01 Vulnerable ·Rockwell
- cpe:2.3:a:rockwellautomation:pavilion8:5.16.00:*:*:*:*:*:*:* Versions 5.16.00 Vulnerable ·Rockwell
- cpe:2.3:a:rockwellautomation:pavilion8:5.17.00:*:*:*:*:*:*:* Versions 5.17.00 Vulnerable ·Rockwell
- cpe:2.3:a:rockwellautomation:pavilion8:5.17.01:*:*:*:*:*:*:* Versions 5.17.01 Vulnerable ·Rockwell
- cpe:2.3:a:rockwellautomation:pavilion8:5.20.00:*:*:*:*:*:*:* Versions 5.20.00 Vulnerable ·Rockwell
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-6435
- 2026-10-03 Alias added: GHSA-55x8-qm73-mrfg
References
More Rockwell Pavilion8 vulnerabilities
- TI-2023-13842 Pavilion8 Security Misconfiguration Vulnerability CVSS 3.1HIGH 8.8
- TI-2024-07380 Rockwell Automation Path Traversal Vulnerability in Pavilion8® CVSS 4.0HIGH 8.6
- TI-2024-07379 Rockwell Automation Incorrect Privileges and Path Traversal Vulnerability in Pavilion8® CVSS 4.0HIGH 8.8
- TI-2024-27035 Rockwell Automation Pavilion8® Unencrypted Data Vulnerability via HTTP protocol CVSS 4.0MEDIUM 5.3
Sources
- CVE-2024-6435 · CVE Program
- CVE-2024-6435 · NVD
- FIRST EPSS
- GHSA-55x8-qm73-mrfg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences