CVE-2024-37365
CVSS V2 None
CVSS V3 None
Description
A remote code execution vulnerability exists in the affected
product. The vulnerability allows users to save projects within the public
directory allowing anyone with local access to modify and/or delete files. Additionally,
a malicious user could potentially leverage this vulnerability to escalate
their privileges by changing the macro to execute arbitrary code.
Overview
- CVE ID
- CVE-2024-37365
- Assigner
- Rockwell
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-11-12T14:52:55.556Z
- Last Modified Date
- 2024-11-12T19:04:00.897Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1709.html |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-37365 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37365 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-11-13 13:11:49 | Added to TrackCVE |