High severity8.8NVD Advisory· Published Sep 12, 2024· Updated Jun 17, 2026

CVE-2024-8533

Description

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.

Affected products

Rockwellautomation/2800c Optixpanel Compact Firmware2 versions
cpe:2.3:o:rockwellautomation:2800c_optixpanel_compact_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:rockwellautomation:2800c_optixpanel_compact_firmware:*:*:*:*:*:*:*:*range: >=4.0.0.325,<4.0.2.116
- (no CPE)range: 4.0.0.325
Rockwellautomation/2800s Optixpanel Standard Firmware2 versions
cpe:2.3:o:rockwellautomation:2800s_optixpanel_standard_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:rockwellautomation:2800s_optixpanel_standard_firmware:*:*:*:*:*:*:*:*range: >=4.0.0.350,<4.0.2.123
- (no CPE)range: 4.0.0.350
Rockwellautomation/Embedded Edge Compute Module Firmware2 versions
cpe:2.3:o:rockwellautomation:embedded_edge_compute_module_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:rockwellautomation:embedded_edge_compute_module_firmware:*:*:*:*:*:*:*:*range: >=4.0.0.347,<4.0.2.106
- (no CPE)range: 4.0.0.347
Rockwellautomation/affected productsllm-create
Rockwellautomation/Rockwell Automationllm-create

Patches

Vulnerability mechanics

References

www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1964.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000