Project Administration Vulnerability in Rockwell Automation Products
CVE-2024-7953

8.7HIGH

Key Information:

Vendor

Rockwell Automation
Status
Dataedgeplatform Datamosaix™ Private Cloud
Vendor
CVE Published:
1 September 2026

What is CVE-2024-7953?

A vulnerability has been identified that enables unauthorized users to create and assume administrative control over projects within Rockwell Automation products. This exploitation allows malicious actors to manipulate, modify, delete, or create new projects, compromising the integrity and functionality of the affected systems. Prompt attention to this issue is crucial to safeguard against potential misuse.

Affected Version(s)

DataEdgePlatform DataMosaix™ Private Cloud <=7.07

References

https://www.rockwellautomation.com/en-us/trust-center/sec...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.