Vulnerability in Rockwell Automation Rslogix 500®
CVE-2024-7847
VULNERABILITY DETAILS Rockwell Automation used the latest versions of the CVSS scoring system to assess the following vulnerabilities. The following vulnerabilities were reported to us by Sharon Brizinov of Claroty Research - Team82. A…
EPSS: 0.002 (8.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Rockwell Automation Rslogix 500® — versions All
- Rockwell Automation Rslogix™ 5 — versions All
- Rockwell Automation Rslogix™ Micro Developer And Starter — versions All
- Rockwellautomation Rslogix_5
- Rockwellautomation Rslogix_500
- Rockwellautomation Rslogix_micro_developer
- Rockwellautomation Rslogix_micro_starter_lite
Weakness classification (CWE)
References
- PSIRT@rockwellautomation.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-7847?
- CVE-2024-7847 is a high-severity vulnerability in Rockwell Automation Rslogix 500®, classified under Insufficient Verification of Data Authenticity. CVSS score: 7.7/10. Published 2024-10-14.
- How severe is CVE-2024-7847?
- High severity. CVSS v3 base score is 7.7 out of 10.