Skip to content
OpenAdvisories
Medium WID-SEC-2024-1087 2 CVEs

Rockwell Automation FactoryTalk Historian SE: Mehrere Schwachstellen ermöglichen Denial of Service

Published May 9, 2024 · Updated May 9, 2024 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk Historian SE ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

FactoryTalk ist eine Software für die industrielle Automatisierung, die zur Maximierung der Effizienz und Steigerung der Anlagenproduktivität entwickelt wurde.

Vulnerabilities 2

  • High 7.5

    Improper Check or Handling of Exceptional Conditions in Aveva PI Server

    AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to remotely crash the PI Message Subsystem of a PI Server, resulting in a denial-of-service condition.

  • Medium 5.3

    Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server

    AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive eve…

Revision history

  1. #1

    Initiale Fassung

References