Is CVE-2024-7847 actively exploited?

No active exploitation of CVE-2024-7847 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-7847 be exploited remotely?

No. CVE-2024-7847 requires local access to exploit.

What is the CVSS score of CVE-2024-7847?

CVE-2024-7847 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2024-7847

HIGH

CVE-2024-7847

CWE-345Published: October 14, 2024· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

VULNERABILITY DETAILS

Rockwell Automation used the latest versions of the CVSS scoring system to assess the following vulnerabilities. The following vulnerabilities were reported to us by Sharon Brizinov of Claroty Research - Team82.

A feature in the affected products enables users to prepare a project file with an embedded VBA script and can be configured to run once the project file has been opened without user intervention. This feature can be abused to trick a legitimate user into executing malicious code upon opening an infected RSP/RSS project file. If exploited, a threat actor may be able to perform a remote code execution. Connected devices may also be impacted by exploitation of this vulnerability.

NVD Source

Technical Analysis

CVE-2024-7847 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.