Summary
Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Rockwell Automation FactoryTalk ausnutzen, um beliebigen Programmcode auszuführen, Administratorrechte zu erlangen oder einen Denial-of-Service-Zustand auszulösen.
Product
FactoryTalk ist eine Software für die industrielle Automatisierung, die zur Maximierung der Effizienz und Steigerung der Anlagenproduktivität entwickelt wurde.
Vulnerabilities 3
-
High 8.6
FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability
A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device.
-
High 8.5
Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation
A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM privileges during installation or repair operations. An a…
-
Medium 4.8
FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability
A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to c…
Revision history
-
#1
Initiale Fassung
References
-
Rockwell Automation Security Advisory SD1799 vom 2026-09-01
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1799.html
-
Rockwell Automation Security Advisory SD1796 vom 2026-09-01
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1796.html