Description
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rockwell Automation | FactoryTalk® View Site Edition | <V15 | — |
Advisories 3
- NCSC-2025-0036 Kwetsbaarheden verholpen in Rockwell Automation FactoryTalk NCSC-NL (Netherlands) · Jan 29, 2025
- WID-SEC-2025-0205 Rockwell Automation FactoryTalk (View SE): Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 28, 2025
- ICSA-25-028-04 Rockwell Automation FactoryTalk View Site Edition CISA ICS & IT advisories · Jan 28, 2025