PT-2025-3924 · Rockwell Automation · Factorytalk Assetcentre

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk AssetCentre versions prior to V15.00.001 Description: A data exposure issue exists due to the storage of credentials in the configuration file of packages such as EventLogAttachmentExtractor, ArchiveExtractor,...

PT-2025-3925 · Rockwell Automation · Factorytalk Assetcentre

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk AssetCentre versions prior to V15.00.001 Description: A data exposure issue exists due to insecure storage of FactoryTalk Security user tokens, which could allow a threat actor to steal a token and impersonate...

PT-2025-3909 · Rockwell Automation · Factorytalk Assetcentre

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk AssetCentre versions prior to V15.00.001 Description: An encryption issue exists due to a weak encryption methodology, which could allow a threat actor to extract passwords belonging to other users of the...

The vulnerability of the FactoryTalk System Services system service in the FactoryTalk Policy Manager software for manufacturing process control, related to access control deficiencies, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FactoryTalk System Services system service in the FactoryTalk Policy Manager software for manufacturing process management is related to deficiencies in access control for the backup copy folder. Exploiting this vulnerability could allow an intruder operating remotely to...

The vulnerability of the FactoryTalk Policy Manager software in managing production processes, related to deficiencies in key storage for read-only rights, allows a perpetrator to gain access to protected information.

The vulnerability of the FactoryTalk Policy Manager software-related to deficiencies in key storage with read permissions. Exploiting this vulnerability could allow an attacker to gain access to protected information...

Rockwell Automation FactoryTalk Updater Installed (Windows)

Binary data rockwellfactorytalkupdaterwininstalled.nbin...

Rockwell Automation FactoryTalk Updater Client 4.20.00 RCE

The version of Rockwell Automation FactoryTalk Updater Client installed on the remote Windows host is prior to 4.20.0. It is, therefore, affected by a remote code execution vulnerability. For more information, consult the vendor advisory. Note that Nessus has not tested for these issues but has...

Rockwell Automation FactoryTalk Updater Agent < 4.20.00 Privilege Escalation

The version of Rockwell Automation FactoryTalk Updater Agent installed on the remote Windows host is prior to 4.20.0. It is, therefore, affected by a privilege escalation vulnerability. For more information, consult the vendor advisory. Note that Nessus has not tested for these issues but has...

The vulnerability of the FactoryTalk platform for centralized application management by Rockwell Automation’s ThinManage application allows a attacker to perform a “disruption of service” attack.

The vulnerability of the FactoryTalk platform for centralized application management by Rockwell Automation’s ThinManage lies in the ability to read data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to carry out a DoS Denial-of-Service attack remotely...

CVE-2024-10945 FactoryTalk® Updater Local Privilege Escalation

A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability requires a local, low privileged threat actor to replace certain files during update and exists due to a failure to perform proper security checks before installation...

CVE-2024-10945 FactoryTalk® Updater Local Privilege Escalation

A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability requires a local, low privileged threat actor to replace certain files during update and exists due to a failure to perform proper security checks before installation...

CVE-2024-10944 FactoryTalk® Updater Remote Code Execution

A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due to improper input validation resulting in the possibility of a malicious Updated Agent being deployed...

CVE-2024-10944 FactoryTalk® Updater Remote Code Execution

A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due to improper input validation resulting in the possibility of a malicious Updated Agent being deployed...

CVE-2024-10943 FactoryTalk® Updater Authentication Bypass

An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required during authentication...

CVE-2024-10943 FactoryTalk® Updater Authentication Bypass

An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required during authentication...

CVE-2024-37365 FactoryTalk View ME Remote Code Execution Vulnerability via Project Save Path

A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escala...

CVE-2024-37365 FactoryTalk View ME Remote Code Execution Vulnerability via Project Save Path

A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escala...

CVE-2024-37365

The CVE-2024-37365 entry concerns Rockwell Automation FactoryTalk View ME (Machine Edition). Reports describe a remote code execution path where saving projects in the public directory allows a local attacker to modify/delete files and potentially escalate privileges by altering macros to execute...

Rockwell Automation FactoryTalk Updater 安全漏洞

Rockwell Automation FactoryTalk Updater is a secure tool from Rockwell Automation, Inc. for managing Rockwell Automation software versions and activations on networked computers. A security vulnerability exists in Rockwell Automation FactoryTalk Updater versions prior to v4.20.00, which stems fro...

Rockwell Automation FactoryTalk Updater 安全漏洞

Rockwell Automation FactoryTalk Updater is a secure tool from Rockwell Automation, Inc. for managing Rockwell Automation software versions and activations on networked computers. A security vulnerability exists in Rockwell Automation FactoryTalk Updater versions prior to v4.20.00 that stems from ...