cveboard RSS feed

CVE-2024-7847

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

RSLogix™ 5 and RSLogix 500® Remote Code Execution Via VBA Embedded Script

VULNERABILITY DETAILS Rockwell Automation used the latest versions of the CVSS scoring system to assess the following vulnerabilities. The following vulnerabilities were reported to us by Sharon Brizinov of Claroty Research - Team82. A feature in the affected products enables users to prepare a project file with an embedded VBA script and can be configured to run once the project file has been opened without user intervention. This feature can be abused to trick a legitimate user into executing malicious code upon opening an infected RSP/RSS project file. If exploited, a threat actor may be able to perform a remote code execution. Connected devices may also be impacted by exploitation of this vulnerability.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

RSLogix 500®

Vendor
Rockwell Automation
Product
RSLogix 500®
Platforms
Unknown
Default status
unaffected
RSLogix 500® · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
AllaffectedUnavailableUnavailableUnavailableNone listed

RSLogix™ Micro Developer and Starter

Vendor
Rockwell Automation
Product
RSLogix™ Micro Developer and Starter
Platforms
Unknown
Default status
unaffected
RSLogix™ Micro Developer and Starter · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
AllaffectedUnavailableUnavailableUnavailableNone listed

RSLogix™ 5

Vendor
Rockwell Automation
Product
RSLogix™ 5
Platforms
Unknown
Default status
unaffected
RSLogix™ 5 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
AllaffectedUnavailableUnavailableUnavailableNone listed