Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2024-8533

Rockwell Automation OptixPanel™ Privilege Escalation Vulnerability via File Permissions

High7.7EPSS 1.3%
Published
Updated
Reserved
Assigned by
Rockwell

Description

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.

Scores

CVSS scores of CVE-2024-8533, by who scored it
Scored byCVSSScoreVector
RockwellCNA (assigner)4.0High7.7CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
NVDNVD · Analyzed4.0High7.7CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS (exploitation in 30 days)
1.3% · top 30% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.7.

Weakness

Affected products

What to do

Solution: Affected Product         First Known in Software Version         Corrected in Software Version         2800C OptixPanel™ Compact         4.0.0.325         4.0.2.116         2800S OptixPanel™ Standard         4.0.0.350         4.0.2.123         Embedded Edge Compute Module         4.0.0.347         4.0.2.106   Mitigations and Workarounds Customers using the affected software are encouraged to apply security best practices * For information on how to mitigate Security Risks on industrial automation control systems, we encourage customers to implement our suggested security best practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight  to minimize the risk of the vulnerability.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2024-8533 badge
[![CVE-2024-8533](https://trackcve.app/badge/CVE-2024-8533.svg)](https://trackcve.app/cve/CVE-2024-8533)

Record last updated .