Description
A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability requires a local, low privileged threat actor to replace certain files during update and exists due to a failure to perform proper security checks before installation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk Updater | <4.20.00 | — |
Advisories 2
- ICSA-24-319-14 Rockwell Automation FactoryTalk Updater (Update A) CISA ICS & IT advisories · Nov 18, 2024
- WID-SEC-2024-3428 Rockwell Automation FactoryTalk: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2024