Rockwell Automation FactoryTalk Remote Access
view advisory published 2024-05-14
Successful exploitation of this vulnerability could allow an attacker to enter a malicious executable and run it as a system user, resulting in remote code execution.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-3640US | — | Exploit | ||
An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-135-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-135-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationFactoryTalk Remote Access
For additional information, refer to Rockwell Automation's security bulletin.
https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html - FixedFactoryTalk Remote Access
Rockwell Automation recommends user to upgrade to v13.6.
https://compatibility.rockwellautomation.com/Pages/MultiProductSelector.aspx?crumb=111
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan