CVE-2014-9209

2015-03-3101:59:19

[email protected]

web.nvd.nist.gov

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

25.5%

JSON

Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected configurations

Nvd

Node

rockwellautomationfactorytalk_services_platformRange≤2.70.00

rockwellautomationfactorytalk_view_studioRange≤8.00.00

VendorProductVersionCPE
rockwellautomationfactorytalk_services_platform*cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*
rockwellautomationfactorytalk_view_studio*cpe:2.3:a:rockwellautomation:factorytalk_view_studio:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rockwellautomation	factorytalk_services_platform	*	cpe:2.3:a:rockwellautomation:factorytalk_services_platform::::::::
rockwellautomation	factorytalk_view_studio	*	cpe:2.3:a:rockwellautomation:factorytalk_view_studio::::::::