{"id":"CVE-2024-40620","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-40620","generatedAt":"2026-10-28T11:38:31.043Z","title":"CVE-2024-40620 IMPACT A vulnerability exists in the affected product due to lack of encryption of sensitive information.","description":"CVE-2024-40620 IMPACT\n\nA vulnerability exists in the affected product due to lack of encryption of sensitive information. The vulnerability results in data being sent between the Console and the Dashboard without encryption, which can be seen in the logs of proxy servers, potentially impacting the data's confidentiality.","published":"2024-08-14T20:15:12.000Z","lastModified":"2026-06-17T07:46:11.000Z","status":"Analyzed","sourceIdentifier":"PSIRT@rockwellautomation.com","cvss":{"version":"4.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-311"],"affected":["rockwellautomation/pavilion8"],"epss":{"score":0.00186,"percentile":0.08124,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201691.html","tags":["Vendor Advisory"],"source":"PSIRT@rockwellautomation.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-40620","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}