Quick answers
- Is CVE-2024-7952 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2024-7952 being exploited in the wild.
- How severe is CVE-2024-7952?
- Informational severity, with a CVSS score of 7.5, published 1 September 2026.
- Which products and versions are affected?
- Rockwell Automation DataMosaix Private Cloud <= 7.07.
- Is there a fix for CVE-2024-7952?
- A patch was published on 2024-10-04: Corrected in version 7.09 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2024-7952 attacked?
- It is attacked over the network, in a hosted service.
- Am I affected by CVE-2024-7952?
- Check whether you run Rockwell Automation DataMosaix Private Cloud at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A sensitive information exposure vulnerability exists in DataMosaix Private Cloud where hardcoded links in the source code reference JSON files that can be accessed without authentication. The vulnerability is classified as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The attack requires only network access to the affected system; no credentials or user interaction is needed. An unauthenticated remote attacker can directly reach these JSON files over the network and retrieve customer data. Rockwell Automation corrected this vulnerability in version 7.09, and no known public exploits in the wild have been reported.
Affected products
- Rockwell Automation DataMosaix Private Cloud <= 7.07
Timeline
- 2024-10-04: disclosed: Rockwell Automation SD1702 advisory published
- 2024-10-04: patched: Corrected in version 7.09