CVE-2025-24482 FactoryTalk® View Site Edition - Local Code Injection

A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions...

CVE-2024-45824 FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains...

PT-2024-6054

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View Site Edition affected versions not specified Description A remote code vulnerability exists in the affected products. This issue can be exploited for full unauthenticated remote code execution when combined...

PT-2024-38401

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View Site Edition affected versions not specified Description A code execution issue exists in the affected product due to improper default file permissions. This allows any user to edit or replace files that ar...

CVE-2023-46289

Rockwell Automation FactoryTalk View Site Edition (V11.0 affected) suffers from improper input validation (CVE-2023-46289). Insufficient validation could allow a remote attacker to submit malicious data, potentially rendering the product unavailable and requiring a restart to recover, i.e., a den...

CVE-2023-46289: Improper Input Validation

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a...