CVE-2024-6326
Last modified
CVE-2024-6326 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders when they are temporarily copied to an interim folder. EPSS estimates a 0.18% chance of exploitation in the next 30 days.
Description
An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders when they are temporarily copied to an interim folder. This vulnerability is due to the lack of explicit permissions set on the backup folder. If private keys are obtained by a malicious user, they could impersonate resources on the secured network.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Rockwellautomation | Factorytalk Policy Manager | 6.40.0 |
| Rockwellautomation | Factorytalk System Services | 6.40.0 |
References
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1678.htmlMitigation, Vendor Advisory
- https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1678.htmlMitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-6326?
How severe is CVE-2024-6326?
How do I fix CVE-2024-6326?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-6320The ScrollTo Top plugin for WordPress is vulnerable to Cross…8.8
- CVE-2024-6321The ScrollTo Bottom plugin for WordPress is vulnerable to Cr…8.8
- CVE-2024-6322Access control for plugin data sources protected by the ReqA…5.4
- CVE-2024-6323Improper authorization in global search in GitLab EE affecti…7.5
- CVE-2024-6324An issue was discovered in GitLab CE/EE affecting all versio…4.3
- CVE-2024-6325The v6.40 release of Rockwell Automation FactoryTalk® Policy…6.5
- CVE-2024-6327In Progress® Telerik® Report Server versions prior to 2024 Q…9.8
- CVE-2024-6328The MStore API – Create Native Android & iOS Apps On The Clo…9.8
- CVE-2024-6329An issue was discovered in GitLab CE/EE affecting all versio…7.5
- CVE-2024-6330The GEO my WP WordPress plugin before 4.5.0.2 does not preve…9.8
- CVE-2024-6331stitionai/devika main branch as of commit cdfb782b0e634b773b…6.5
- CVE-2024-6332The Booking for Appointments and Events Calendar – Amelia Pr…6.5
Are you affected by CVE-2024-6326?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST