EUVD-2026-69136
GHSA-vcp2-c9vw-q6x9
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local attack vector with low privilege confirmed; user interaction required (victim must launch application); scope unchanged as execution stays at user's own permission level.
Primary rating from Vendor (Rockwell).
CVSS VectorVendor: Rockwell
Lifecycle Timeline
2DescriptionCVE.org
A security issue exists within ControlFLASH™, where the installer grants write permissions to the "Everyone" group on a product installation directory. This could allow arbitrary code execution, resulting in an attacker being given the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level.
AnalysisAI
Insecure installation directory permissions in Rockwell Automation ControlFLASH™ expose any local user account to arbitrary code execution by allowing write access to the product's installation folder for the Windows 'Everyone' group. An attacker with low-privileged local access can plant a malicious binary or DLL in the installation directory, which then executes at the permission level of whichever user subsequently launches ControlFLASH - potentially a privileged operator in an OT environment. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have an active local user account on the target Windows machine - confirmed by CVSS PR:L (low privilege required) and AV:L (local attack vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N, score 7.0) accurately captures the threat profile: attack is local, complexity is low once access is obtained, exploitation requires a low-privileged account, and a user interaction step (the victim launching ControlFLASH) is required. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the Rockwell Automation security advisory SD1793 (https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1793.html) for the vendor-recommended patch or updated installer. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems running ControlFLASH and document current versions across OT and IT environments. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today