Summary
Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk Produkten ausnutzen, um seine Privilegien zu erhöhen oder Cross-Site-Scripting-Angriffe durchzuführen.
Product
FactoryTalk ist eine Software für die industrielle Automatisierung, die zur Maximierung der Effizienz und Steigerung der Anlagenproduktivität entwickelt wurde.
Vulnerabilities 2
-
High 8.8
Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Validation Bypass
A security issue exists within FactoryTalk® Services Platform (FTSP), allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for R…
-
High 8.4
Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting
A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges c…
Revision history
-
#1
Initiale Fassung
References
-
Rockwell Automation Security Advisory SD1786 vom 2026-07-14
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1786.html
-
Rockwell Automation Security Advisory SD1787 vom 2026-07-14
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1787.html