Rockwell Automation FactoryTalk Remote Access
Advisory ansehen veröffentlicht 2024-05-14
Successful exploitation of this vulnerability could allow an attacker to enter a malicious executable and run it as a system user, resulting in remote code execution.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-3640US | — | Exploit | ||
An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-135-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-135-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationFactoryTalk Remote Access
For additional information, refer to Rockwell Automation's security bulletin.
https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html - BehobenFactoryTalk Remote Access
Rockwell Automation recommends user to upgrade to v13.6.
https://compatibility.rockwellautomation.com/Pages/MultiProductSelector.aspx?crumb=111
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan