Rockwell Automation FactoryTalk: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Summary

Product

Vulnerabilities 2

• High 7.1
  CVE-2024-6236

  Denial of Service

  Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX

  NetScaler NetSclaer Agent NetScaler Console
  Jul 10, 2024
• Medium 6.0
  CVE-2024-6325

  Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services

  The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/securit…

  Rockwell Automation FactoryTalk® System Services (installed via FTPM) FactoryTalk® Policy Manager (FTPM) ICS / OT
  Jul 16, 2024

Revision history

1. 2024-07-16 #1

   Initiale Fassung

References

• Rockwell Advisory vom 2024-07-16
  https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1678.html