Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-38743
HistoryOct 17, 2022 - 9:15 p.m.

Improper access control

2022-10-1721:15:00
PRIOn knowledge base
www.prio-n.com
3
rockwell automation
factorytalk vantagepoint
sql server
improper access control
vulnerability
read-only privileges
arbitrary code
restricted data

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.0%

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. If successfully exploited, this could allow the attacker to execute arbitrary code and gain access to restricted data.

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.0%

Related for PRION:CVE-2022-38743