Description
An
authentication bypass vulnerability exists in the affected product. The
vulnerability exists due to shared secrets across accounts and could allow a threat
actor to impersonate a user if the threat actor is able to enumerate additional
information required during authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk Updater | V4.00.00-4.10.00 | — |
Advisories 2
- ICSA-24-319-14 Rockwell Automation FactoryTalk Updater (Update A) CISA ICS & IT advisories · Nov 18, 2024
- WID-SEC-2024-3428 Rockwell Automation FactoryTalk: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2024