Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87945
HistoryOct 10, 2022 - 12:00 a.m.

Rockwell Automation Factory Talk VantagePoint SQL Injection Vulnerability

2022-10-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
rockwell automation
vantagepoint
sql injection
vulnerability
industrial application
remote code execution
server
failure to validate
back-end database
exploitation

0.001 Low

EPSS

Percentile

42.1%

Rockwell Automation Factory Talk VantagePoint is an advanced industrial application ecosystem from Rockwell Automation, Inc. The SQL injection vulnerability in Rockwell Automation Factory Talk VantagePoint stems from a failure to properly validate SQL statements entered by users when retrieving information from a back-end database, and can be exploited to execute remote code execution on the server.

0.001 Low

EPSS

Percentile

42.1%

Related for CNVD-2022-87945