Description
The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html by implementing CIP security and did not update to the versions of the software CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html and CVE-2022-1161. https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk® System Services (installed via FTPM) | 6.40 | — |
| Rockwell Automation | FactoryTalk® Policy Manager (FTPM) | v6.40 | — |
Advisories 2
- WID-SEC-2024-1626 Rockwell Automation FactoryTalk: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen BSI CERT-Bund (WID) · Jul 16, 2024
- ICSA-24-193-19 Rockwell Automation FactoryTalk System Services and Policy Manager CISA ICS & IT advisories · Jul 11, 2024