Lucene search
K

10 matches found

Vulnrichment
Vulnrichment
added 2025/01/28 8:59 p.m.5 views

CVE-2025-24482 FactoryTalk® View Site Edition - Local Code Injection

A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions...

7CVSS7AI score0.00042EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.2 views

PT-2025-5370 · Rockwell Automation · Factorytalk® View Site Edition

Name of the Vulnerable Software and Affected Versions: Product and version mentioned affected versions not specified Description: The issue is related to an incorrect permission assignment in the product, which is due to the incorrect assignment of permissions to the remote debugger port. This ca...

7CVSS7AI score0.00034EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.2 views

PT-2025-5371 · Rockwell Automation · Factorytalk® View Site Edition

Name of the Vulnerable Software and Affected Versions: Product and version affected versions not specified Description: A Local Code Injection issue exists due to incorrect default permissions, allowing for the execution of DLLs with higher-level permissions. Recommendations: At the moment, there...

7CVSS7.5AI score0.00042EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.1 views

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition arises from the lack of measures taken to clean data at the management level. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition stems from the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary cod...

10CVSS5.9AI score0.01535EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/09/12 2:5 p.m.20 views

CVE-2024-45824 FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains...

9.8CVSS0.01535EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/09/12 12:0 a.m.2 views

Rockwell Automation FactoryTalk View Site Edition 安全漏洞

Rockwell Automation FactoryTalk View Site Edition is an integrated software package from Rockwell Automation, Inc. It is used to develop and run... A remote code execution vulnerability exists in Rockwell Automation FactoryTalk View Site Edition, which can be exploited by an attacker to cause...

9.8CVSS8.3AI score0.01535EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/08/14 7:48 p.m.8 views

CVE-2024-7513 Rockwell Automation FactoryTalk® View Site Edition Code Execution Vulnerability via File Permissions

CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions...

8.5CVSS7.6AI score0.00074EPSS
Exploits0References1
ICS
ICS
added 2024/08/13 6:0 a.m.21 views

Rockwell Automation FactoryTalk View Site Edition (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk View Site Edition Vulnerability : Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

8.8CVSS7AI score0.00074EPSS
Exploits0References10
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.1 views

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition arises from insufficient verification of input data. This vulnerability allows a perpetrator to trigger service failures.

The vulnerability of the software for managing and monitoring manufacturing processes in Rockwell Automation’s FactoryTalk View Site Edition exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to trigger service failures remotely...

7.8CVSS7.1AI score0.00169EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2023/10/27 6:28 p.m.54 views

CVE-2023-46289

Rockwell Automation FactoryTalk View Site Edition (V11.0 affected) suffers from improper input validation (CVE-2023-46289). Insufficient validation could allow a remote attacker to submit malicious data, potentially rendering the product unavailable and requiring a restart to recover, i.e., a den...

7.5CVSS7.5AI score0.00169EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder