CVE-2024-7953

CVE-2024-7953 is an improper access control flaw (CWE-284) in one or more Rockwell Automation products, published by the vendor's PSIRT; the provided description does not name the specific products or versions. According to the description, an authenticated user with low privileges can trigger the flaw over the network by creating a project on the affected system and becoming that project's administrator. A successful attacker can then create, modify, and delete the project they created, and the CVSS 4.0 scoring indicates the impact does not spill over to other systems (SC:N/SI:N/SA:N). Any user with low-privileged credentials on a vulnerable installation could trigger it, so defenders should consult Rockwell's advisory for the exact affected product list, as it is not enumerated in the available data. No public proof-of-concept exploit is known, the flaw is not in CISA's KEV catalog, and EPSS currently estimates a 0.2% probability of exploitation within the next 30 days.

What to do: Consult Rockwell Automation's security advisory for CVE-2024-7953 to identify the affected products and apply the vendor's software/firmware update. Until patched, restrict project-creation rights on affected systems to trusted administrative accounts and audit for newly created, unexpected projects. No public exploits or in-the-wild exploitation are currently known.