Rockwell Automation FactoryTalk View Site

Summary

Vulnerabilities 1

• Critical 9.8
  CVE-2024-45824

  FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation

  CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the…

  Rockwell Automation FactoryTalk® View Site Edition ICS / OT
  Sep 12, 2024

Revision history

1. 2024-09-12 #1

   Initial Publication

References

• ICSA Advisory ICSA-24-256-23 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-23
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014