PT-2024-6676 · Rockwell Automation · Emulate3D

Published 2024-06-17 · Updated 2024-08-17 · CVE-2024-6079

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Emulate3D version 17.00.00.13276

Description: A vulnerability exists in the Rockwell Automation Emulate3D, which could be leveraged to execute a DLL Hijacking attack. The application loads shared libraries, which are readable and writable by any user. If exploited, a malicious user could leverage a malicious dll and perform a remote code execution attack. The issue is related to incorrect external control of the name or path of a .dll file when loading libraries.

Recommendations: For Rockwell Automation Emulate3D version 17.00.00.13276, patch immediately to prevent potential system compromise. Monitor for signs of exploit and consider restricting access to shared libraries to minimize the risk of exploitation. As a temporary workaround, consider disabling the loading of shared libraries until a patch is available.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-610

CWE-434

Related Identifiers

BDU:2024-07882

CVE-2024-6079

Affected Products

Emulate3D

References · 9

• https://bdu.fstec.ru/vul/2024-07882 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6079 · Security Note
• https://t.me/cvedetector/3054 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1823468419892596748 · Twitter Post
• https://vuldb.com/?id.274502 · Note
• https://twitter.com/CVEnew/status/1823430135170916863 · Twitter Post
• https://twitter.com/PorsilapongoCl/status/1823430814224293958 · Twitter Post
• https://twitter.com/oktsec/status/1825008266734195058 · Twitter Post
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201683.html · Note