Rockwell Automation FactoryTalk Service Platform
view advisory published 2024-02-15
Successful exploitation of this vulnerability could allow malicious users with basic user group privileges to receive administrator group privileges.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-21915US | high8.8 | — | ||
A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could pote… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-046-16 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-046-16 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- MitigationFactoryTalk Service Platform
Rockwell Automation encourages users with the affected software to apply the risk mitigations, if possible. Additionally, they encourage customers to implement Rockwell Automation suggested security best practices to minimize the risk of vulnerability.
https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan