CVE-2024-6435

CVE-2024-6435 is a high-severity privilege escalation vulnerability affecting Rockwell Automation Pavilion8 products. A low-privileged attacker can exploit this flaw to gain administrative access, enabling them to read sensitive data, create new users with elevated privileges, and perform critical functions. With a CVSS score of 8.8, the vulnerability has a low attack complexity and requires no user interaction, leading to high impacts on confidentiality, integrity, and availability. Currently, there is no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.