VULNERABILITY INTELLIGENCE

CVE-2024-45824

CVSS score9.8 CRITICAL
EPSS probability1.28%
CISA KEVNot currently listed
Published2024-09-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue.

Weakness classification

  • PSIRT@rockwellautomation.com: CWE-77
  • nvd@nist.gov: CWE-77

Primary references