Read the docs
TI-2024-10394 Aliases CVE-2024-11220GHSA-qv8f-7m6r-v8hp

Open Automation Software Incorrect Execution-Assigned Permissions

Priority LOW 38CWE-279Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00152 4th percentileScored 2026-11-07
Fix Fixed Open Automation Software (Open Automation Software): V20.00.0076

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Open Automation SoftwareOpen Automation Softwarebefore V20.00.0076V20.00.0076Patch availableCNA
  • Open Automation Software VendorOpen Automation Software Affected before V20.00.0076 Fixed in V20.00.0076 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openautomationsoftware:open_automation_software:*:*:*:*:*:*:*:*before 20.0.0.76VulnerableOpen Automation Software
  • cpe:2.3:a:openautomationsoftware:open_automation_software:*:*:*:*:*:*:*:* Versions before 20.0.0.76 Vulnerable ·Open Automation Software

Remediation

  • Fix · CNA Open Automation Software (Open Automation Software) Fixed in V20.00.0076

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-11220
  2. 2026-10-03 Alias added: GHSA-qv8f-7m6r-v8hp

References

Other 2

  • TI-2024-14772 A file write vulnerability exists in the OAS Engine Save Security Configuration… CVSS 3.1MEDIUM 4.9
  • TI-2024-18056 Improper input validation in Open Automation Software OAS Platform CVSS 3.1MEDIUM 4.9
  • TI-2024-16470 A denial of service vulnerability exists in the OAS Engine File Data Source Configuration… CVSS 3.1MEDIUM 4.9
  • TI-2024-14537 A file write vulnerability exists in the OAS Engine Tags Configuration functionality of… CVSS 3.1MEDIUM 4.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences