← Database

CVE-2024-40620

HIGH CVSS: 7.5 Published: 2024-08-14 Modified: 2026-06-17

Description

CVE-2024-40620 IMPACT A vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability results in data being sent between the Console and the Dashboard without encryption, which can be seen in the logs of proxy servers, potentially impacting the data's confidentiality.

Affected Platforms

Rockwellautomation Pavilion8

Weakness Type

CWE-311, CWE-311

References