CVE-2022-38743

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. ...

CVE-2022-3158

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully...

PT-2022-20853 · Rockwell Automation · Factorytalk Vantagepoint

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 Description: The issue is related to an input validation vulnerability in the FactoryTalk VantagePoint SQL Server. This vulnerability occurs because the server...

CVE-2022-38743

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. ...

PT-2022-24548 · Rockwell Automation · Factorytalk Vantagepoint

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 Description: The issue is related to an improper access control vulnerability. A malicious user with read-only privileges could potentially execute SQL statemen...

CVE-2022-3158

CVE-2022-3158 affects Rockwell Automation FactoryTalk VantagePoint (versions 8.0, 8.10, 8.20, 8.30, 8.31). The issue is an input validation vulnerability in the FactoryTalk VantagePoint SQL Server that allows SQL statements to be executed without proper validation, enabling a user with basic priv...

Rockwell Automation FactoryTalk VantagePoint

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk VantagePoint software Vulnerabilities: Improper Access Control, SQL Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow...

CISA Releases Two Industrial Control Systems Advisories

CISA released two 2 Industrial Control Systems ICS advisories on October 06, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...