VULNERABILITY INTELLIGENCE

CVE-2024-6068

CVSS score7.3 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-11-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

A memory corruption vulnerability exists in the affected products when parsing DFT files. Local threat actors can exploit this issue to disclose information and to execute arbitrary code. To exploit this vulnerability a legitimate user must open a malicious DFT file.

Weakness classification

  • PSIRT@rockwellautomation.com: CWE-1284

Primary references