Rockwell Automation FactoryTalk View Site Edition (Update A)
view advisory published 2024-08-13
Successful exploitation of this vulnerability could allow any user to edit or replace files, which are executed by account with elevated permissions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-7513US | high8.8 | — | ||
CVE-2024-7513 IMPACT
A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-226-06 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-226-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationFactoryTalk View SE
Add specific users or user groups and assign their permissions to this folder as needed.
- FixedFactoryTalk View SE
If you assign read-only permission to those users or user groups, they can only view and will not be able to write to project files. Users with read-only permission can still test run and run the FactoryTalk View SE client.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan