CVE-2024-9412

Description

An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthorized user to sign in. While removal of all role mappings is unlikely, it could occur in the case of unexpected or accidental removal by the administrator. If exploited, an unauthorized user could access data they previously but should no longer have access to.

Is your site exposed to CVE-2024-9412?

Run a free security scan — no signup, results in seconds.

Weakness Type (CWE)

CWE-842 CWE-842

References

Other References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201704.html

Frequently Asked Questions

What is CVE-2024-9412? +

An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthorized user to sign in. While removal of all role mappings is unlikely, it could occur in the case of unexpected or accidental removal by the administrator. If exploited, an unauthorized user could access data they previously but should no longer have access to.

How do I check if I'm vulnerable to CVE-2024-9412? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-6970

authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege …

CVE-2024-10082 8.7

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method …

CVE-2024-25632 8.6

eLabFTW is an open source electronic lab notebook for research labs. In the context of eLabFTW, an administrator is a …