Description
A Remote
Code Execution vulnerability exists in the affected product. The vulnerability requires
a high level of permissions and exists due to improper input validation resulting
in the possibility of a malicious Updated Agent being deployed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk Updater | <4.20.00 | — |
Advisories 2
- ICSA-24-319-14 Rockwell Automation FactoryTalk Updater (Update A) CISA ICS & IT advisories · Nov 18, 2024
- WID-SEC-2024-3428 Rockwell Automation FactoryTalk: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2024