Code injection

2023-10-2719:15:00

PRIOn knowledge base

www.prio-n.com

code injection

factorytalk services

windows os

user token

web service

vulnerability

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

JSON

Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if the authorized user did not previously log in into the FactoryTalk® Services Platform web service.