ICSA-24-284-15

icsaUScisa_csaf_ot

Rockwell Automation DataMosaix Private Cloud

view advisory published 2024-10-10

Successful exploitation of these vulnerabilities could allow an attacker to view customer data or create, modify, or delete their own project.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-7956US—OT elevated—
A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user pr…
CVE-2024-7953US—OT elevated—
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modif…
CVE-2024-7952US—OT elevated—
A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If ex…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • MitigationDataMosaix Private Cloud

    Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible.

  • MitigationDataMosaix Private Cloud

    Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible.

  • MitigationDataMosaix Private Cloud

    Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan