Lucene search

K
cvelistRockwellCVELIST:CVE-2024-3640
HistoryMay 16, 2024 - 3:25 p.m.

CVE-2024-3640 Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables

2024-05-1615:25:28
CWE-428
Rockwell
raw.githubusercontent.com
8
cve-2024-3640
rockwell automation
factorytalk remote access
unquoted executables
remote code execution
admin privileges

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threat actor to enter a malicious executable and run it as a System user. A threat actor needs admin privileges to exploit this vulnerability.

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Related for CVELIST:CVE-2024-3640