Skip to content
OpenAdvisories
High · 8.2 CVE-2024-37367 EUVD-2024-36615GHSA-xcj3-hfw8-h3h5

Rockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction

Published Jun 14, 2024 · Updated Aug 2, 2024 · Assigned by Rockwell

Description

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. This action is allowed without proper authentication verification.

Affected products

VendorProductAffectedFixed
Rockwell Automation FactoryTalk® View SE v12 —

Advisories 2

References