DeutschShown in its original language — a full translation is planned for a future version.
Rockwell Automation FactoryTalk: Mehrere Schwachstellen
view advisory published 2024-11-12
Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk View ME und FactoryTalk Updater ausnutzen, um Sicherheitsvorkehrungen zu umgehen, seine Rechte zu erweitern, Informationen offenzulegen oder Code auszuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-10945US | — | — | ||
A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability requires a local, low privileged threat actor to replace certain files during update an… | ||||
| CVE-2024-10944US | — | — | ||
A Remote
Code Execution vulnerability exists in the affected product. The vulnerability requires
a high level of permissions and exists due to improper input validation resulting
i… | ||||
| CVE-2024-10943US | — | — | ||
An
authentication bypass vulnerability exists in the affected product. The
vulnerability exists due to shared secrets across accounts and could allow a threat
actor to impersonate… | ||||
| CVE-2024-37365US | high7.8 | — | ||
A remote code execution vulnerability exists in the affected
product. The vulnerability allows users to save projects within the public
directory allowing anyone with local access… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan