Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2024-7513

Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions

High8.5EPSS 1.7%
Published
Updated
Reserved
Assigned by
Rockwell

Description

CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions.

Timeline

  1. ID reserved

    By Rockwell

  2. · 9 days later

    Published

  3. · 12 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2024-7513, by who scored it
Scored byCVSSScoreVector
RockwellCNA (assigner)4.0High8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
NVDNVD · Analyzed4.0High8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS (exploitation in 30 days)
1.7% · top 23% of all CVEs (7 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.5.

Weakness

Affected products

What to do

Solution: Upgrade to v15.0

Workaround: Customers using the affected software are encouraged to apply security best practices, if possible. * Remove “Everyone” user group from read and write privileges by changing the FactoryTalk® View SE project folder permissions using the help guide. Detailed instructions are below. * Open FactoryTalk® View Studio -> Help -> FactoryTalk® View SE Help. In the file -> Security -> “HMI projects folder”

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-7513 badge
[![CVE-2024-7513](https://trackcve.app/badge/CVE-2024-7513.svg)](https://trackcve.app/cve/CVE-2024-7513)

Record last updated .