VULNERABILITY INTELLIGENCE
CVE-2024-7513
CVSS score8.5 HIGH
EPSS probability1.66%
CISA KEVNot currently listed
Published2024-08-14
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions.
Weakness classification
- CWE-732: Incorrect Permission Assignment for Critical Resource
Primary references
- PSIRT@rockwellautomation.com — Mitigation, Vendor Advisory