No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability is not exploitable remotely.
Credit: Rockwell Automation
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2024-7513 | CWE-732 Incorrect Permission Assignment for Critical Resource | 8.8 High |
A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions. Mitigation: By default, all HMI server projects are saved in the HMI projects folder on the HMI server computer located at C:\Users\Public\Documents\RSView Enterprise\SE\HMI projects. Rockwell Automation encourages users of the affected software to enhance security and p… Mitigation: Remove the INTERACTIVE group from the folder's security properties. Mitigation: Add specific users or user groups and assign their permissions to this folder as needed. Affected, fixed & timelineAffected:
Vendor fix: If you assign read-only permission to those users or user groups, they can only view and will not be able to write to project files. Users with read-only permission can still test run and run the FactoryTalk View SE client. Vendor fix: In Version 14: Open FactoryTalk View Studio -> Help -> FactoryTalk View SE Help -> In the Help file -> Security -> "HMI projects folder" Mitigation: For information on how to mitigate security risks on industrial automation control systems, Rockwell Automation encourages customers to implement their suggested security best practices to minimize the risk of the vulnerability. Mitigation: For more information, refer to Rockwell Automation's security advisory SD 1688. |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-7513 | 8.5 High | Rockwell Automation FactoryTalk View Site Edition CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permission… |
Named by the advisory itself. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.