[{"vendor":"rockwellautomation","product":"2800c_optixpanel_compact","defaultStatus":"unaffected","cpes":["cpe:2.3:o:rockwellautomation:2800c_optixpanel_compact:4.0.0.325:*:*:*:*:*:*:*"],"versions":[{"version":"4.0.0.325","status":"affected"}]},{"vendor":"rockwellautomation","product":"2800s_optixpanel_standard","defaultStatus":"unaffected","cpes":["cpe:2.3:o:rockwellautomation:2800s_optixpanel_standard:4.0.0.350:*:*:*:*:*:*:*"],"versions":[{"version":"4.0.0.350","status":"affected"}]},{"vendor":"rockwellautomation","product":"embedded_edge_compute_module","defaultStatus":"unaffected","cpes":["cpe:2.3:o:rockwellautomation:embedded_edge_compute_module:4.0.0.347:*:*:*:*:*:*:*"],"versions":[{"version":"4.0.0.347","status":"affected"}]}]

{"timestamp":"2024-09-12T20:17:47.897766Z","id":"CVE-2024-8533","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Rockwell Automation","product":"2800C OptixPanel™ Compact","defaultStatus":"unaffected","versions":[{"version":"4.0.0.325","status":"affected"}]},{"vendor":"Rockwell Automation","product":"2800S OptixPanel™ Standard","defaultStatus":"unaffected","versions":[{"version":"4.0.0.350","status":"affected"}]},{"vendor":"Rockwell Automation","product":"Embedded Edge Compute Module","defaultStatus":"unaffected","versions":[{"version":"4.0.0.347","status":"affected"}]}]

NIST AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST CWE-276

AND
     OR
          *cpe:2.3:o:rockwellautomation:2800c_optixpanel_compact_firmware:*:*:*:*:*:*:*:* versions from (including) 4.0.0.325 up to (excluding) 4.0.2.116
     OR
          cpe:2.3:h:rockwellautomation:2800c_optixpanel_compact:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:rockwellautomation:2800s_optixpanel_standard_firmware:*:*:*:*:*:*:*:* versions from (including) 4.0.0.350 up to (excluding) 4.0.2.123
     OR
          cpe:2.3:h:rockwellautomation:2800s_optixpanel_standard:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:rockwellautomation:embedded_edge_compute_module_firmware:*:*:*:*:*:*:*:* versions from (including) 4.0.0.347 up to (excluding) 4.0.2.106
     OR
          cpe:2.3:h:rockwellautomation:embedded_edge_compute_module:-:*:*:*:*:*:*:*

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1964.html No Types Assigned

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1964.html Vendor Advisory

A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges.

Rockwell Automation CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Rockwell Automation CWE-269

Rockwell Automation https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1964.html [No types assigned]