Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk Historian SE ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
FactoryTalk ist eine Software für die industrielle Automatisierung, die zur Maximierung der Effizienz und Steigerung der Anlagenproduktivität entwickelt wurde.
Vulnerabilities 2
-
High 7.5
Improper Check or Handling of Exceptional Conditions in Aveva PI Server
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.
-
Medium 5.3
Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server
AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive eve…
Revision history
-
#1
Initiale Fassung
References
-
Rockwell Automation Security Advisory SD 1669 vom 2024-05-09
https://www.rockwellautomation.com/en-us/support/advisory.SD%201669.html