Summary
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk View SE ausnutzen, um Informationen offenzulegen oder seine Privilegien zu erhöhen.
Product
FactoryTalk ist eine Software für die industrielle Automatisierung, die zur Maximierung der Effizienz und Steigerung der Anlagenproduktivität entwickelt wurde.
Vulnerabilities 3
-
High 8.5
Rockwell Automation FactoryTalk® View SE Local Privilege Escalation Vulnerability via Local File Permissions
A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edit scripts, bypassing Access Control Lists, and potentially gaining further access within the system.
-
High 8.2
Rockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. This action is allowed without p…
-
High 8.2
Rockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. Due to the lack of proper authentica…
Revision history
-
#1
Initiale Fassung
References
-
Rockwell Automation Security Advisory vom 2024-06-13
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1676.html
-
Rockwell Automation Security Advisory vom 2024-06-13
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1675.html
-
Rockwell Automation Security Advisory vom 2024-06-13
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1674.html