Rockwell Automation FactoryTalk System Services and Policy Manager
Successful exploitation of these vulnerabilities could allow an attacker to obtain private keys, which would result in impersonating resources on the secured network.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6325US | medium6.5OT elevated | — | ||
The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html… | ||||
| CVE-2024-6236US | high7.5 | — | ||
Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-193-19 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-193-19 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationFactoryTalk Policy Manager
(migrating from v6.40 only) Deploy (OPC UA). Ensure all endpoints were reset successfully.
- MitigationFactoryTalk Policy Manager
(migrating from v6.40 only) Deploy (OPC UA). Ensure all endpoints were reset successfully.
- MitigationFactoryTalk System Services
(migrating from v6.40 only) Deploy (OPC UA). Ensure all endpoints were reset successfully.
- MitigationFactoryTalk System Services
(migrating from v6.40 only) Deploy (OPC UA). Ensure all endpoints were reset successfully.
- FixedFactoryTalk Policy Manager
7) Install FactoryTalk Policy Manager version 6.40.01. Restart the computer when prompted at the end of the install. Open FTPM. FTPM will attempt to connect to the FactoryTalk System Services web server before proceeding. If FTPM could not successfully connect to FactoryTalk System Services (FTSS), it is because the FTSS service hasn't started yet. It will eventually start or else you can start the FTSS service manually in Windows Services.
- FixedFactoryTalk Policy Manager
7) Install FactoryTalk Policy Manager version 6.40.01. Restart the computer when prompted at the end of the install. Open FTPM. FTPM will attempt to connect to the FactoryTalk System Services web server before proceeding. If FTPM could not successfully connect to FactoryTalk System Services (FTSS), it is because the FTSS service hasn't started yet. It will eventually start or else you can start the FTSS service manually in Windows Services.
- FixedFactoryTalk System Services
3) Delete the \keystore folder: c:\ProgramData\Rockwell Automation\FactoryTalk System Services\keystore
- FixedFactoryTalk System Services
3) Delete the \keystore folder: c:\ProgramData\Rockwell Automation\FactoryTalk System Services\keystore
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan