CVE-2024-21915 – Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality

https://notcve.org/view.php?id=CVE-2024-21915

A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A threat actor could potentially read and modify sensitive data, delete data and render the FTSP system unavailable. Existe una vulnerabilidad de escalada de privilegios en Rockwell Automation FactoryTalk® Service Platform (FTSP). Si se explota, un usuario malintencionado con privilegios básicos de grupo de usuarios podría iniciar sesión en el software y recibir privilegios de grupo de administrador FTSP. • https://www.rockwellautomation.com/en-us/support/advisory.SD1662.html • CWE-732: Incorrect Permission Assignment for Critical Resource •