CVE-2024-21917

A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service token and directory. If exploited, a...

CVE-2024-21917

A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service token and directory. If exploited, a...

CVE-2024-21917

CVE-2024-21917 affects Rockwell Automation’s FactoryTalk Service Platform. The root cause is improper verification of cryptographic signatures: FTSP service tokens are not digitally signed against the target directory, enabling a malicious user to obtain a service token and use it for authenticat...

CVE-2024-21917 Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability

A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service token and directory. If exploited, a...

Rockwell Automation FactoryTalk Service Platform

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk Service Platform Vulnerability : Improper Verification of Cryptographic Signature 2. RISK EVALUATION Successful exploitation of this vulnerability...

PT-2024-1615

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Service Platform affected versions not specified Description The issue is related to incorrect cryptographic signature verification in the FactoryTalk Services Platform, which can allow a remote attacker to gain...

Rockwell FactoryTalk Activation Manager < 5.01 RCE

The version of Rockwell FactoryTalk Activation Manager installed on the remote Windows host is prior to 5.01. It is, therefore, affected by a vulnerability. - Rockwell Automation FactoryTalk Activation Manager and Studio 5000 Logix Designer uses the affected Wibu-Systems' products which internall...

Rockwell FactoryTalk Activation Manager Installed (Windows)

Binary data rockwellfactorytalkactivationmanagerwininstalled.nbin...

Rockwell FactoryTalk Activation Manager < 4.02 XSS

The version of Rockwell FactoryTalk Activation Manager installed on the remote Windows host is prior to 4.02. It is, therefore, affected by a vulnerability. - A Cross-Site Scripting XSS vulnerability was found in certain versions of Wibu-Systems CodeMeter that may allow local attackers to inject...

Rockwell FactoryTalk Activation Manager < 4.02 Buffer Overflow

The version of Rockwell FactoryTalk Activation Manager installed on the remote Windows host is prior to 4.02. It is, therefore, affected by a vulnerability. - A custom string copying function of the license server manager in FlexNet Publisher does not use proper bounds checking on incoming data,...

Rockwell FactoryTalk Activation Manager < 4.01.00 Privilege Escalation

The version of Rockwell FactoryTalk Activation Manager installed on the remote Windows host is prior to 4.01.00. It is, therefore, affected by a vulnerability. - Without quotation marks, any whitespace in the file path remains ambiguous, which may allow an attacker to link to or run a malicious...

Rockwell FactoryTalk Services Platform 2.74 Authentication Bypass

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is 2.74. It is, therefore, affected by a vulnerability. - Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTa...

Rockwell FactoryTalk Services Platform < 6.20 Privilege Escalation

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is prior to 6.20. It is, therefore, affected by a vulnerability. - FactoryTalk Services Platform contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security...

Rockwell FactoryTalk Services Platform < 6.20 Deserialization

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is prior to 6.20. It is, therefore, affected by a vulnerability. - Factory Talk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCP/8082, which can insecurely deserialize untrusted...

Rockwell FactoryTalk Services Platform Installed (Windows)

Binary data rockwellfactorytalkservicesplatformwininstalled.nbin...

Rockwell FactoryTalk Services Platform < 3.00 DoS

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is prior to 3.00. It is, therefore, affected by a vulnerability. - A remote unauthenticated attacker could send numerous crafted packets to service ports resulting in memory consumption that could lead to a...

Vulnerabilities fixed in Rockwell Automation FactoryTalk Activation Manager

Rockwell Automation has fixed vulnerabilities in the FactoryTalk Activation Manager. A malicious party could exploit them to cause a denial-of-service, or potentially execute arbitrary code on the vulnerable system and thereby take over the system and thus access and manipulate the system data an...

Rockwell Automation FactoryTalk Activation

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk Activation Manager Vulnerabilities : Out-of-Bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in a...

Rockwell FactoryTalk Product and Version Enumeration (Windows)

Binary data rockwellfactorytalkwinenuminstalls.nbin...

The vulnerability of the FactoryTalk Services Platform’s software for managing manufacturing processes is related to deficiencies in the authentication process. This allows attackers to bypass the authentication process and gain full access to the device.

The vulnerability of the FactoryTalk Services Platform software-related manufacturing process management systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to bypass the authentication process and gain full access to the device...