Skip to content
OpenAdvisories
High · 8.1 CVE-2024-45823 EUVD-2024-41617GHSA-m49g-89fj-x9pc

FactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets

Published Sep 12, 2024 · Updated Sep 12, 2024 · Assigned by Rockwell

Description

CVE-2024-45823 IMPACT

An
authentication bypass vulnerability exists in the affected product. The
vulnerability exists due to shared secrets across accounts and could allow a threat
actor to impersonate a user if the threat actor is able to enumerate additional
information required during authentication.

Affected products

VendorProductAffectedFixed
Rockwell Automation FactoryTalk® Batch View™ 2.01.00 —

Advisories 2

References