Skip to content
OpenAdvisories
High · 7.5 CVE-2022-38744 EUVD-2022-41311GHSA-3cc5-pgvq-wh26

FactoryTalk Alarm and Events Server Vulnerable to Denial-Of-Service Attack

Published Oct 27, 2022 · Updated May 5, 2025 · Assigned by Rockwell

Description

An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and
Events service could open a connection, causing the service to fault and become unavailable. The affected port
could be used as a server ping port and uses messages structured with XML.

Affected products

VendorProductAffectedFixed
Rockwell Automation FactoryTalk Alarm and Events Server All —

Advisories 1

References