FactoryTalk View Machine Edition vulnerabilities
4 known vulnerabilities in FactoryTalk View Machine Edition from Rockwell Automation. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
FactoryTalk View Machine Edition: Improper Limitation of a Pathname to a Restricted Directory
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of this vulnerability is dependent on the k
- 9.3 Critical severity
FactoryTalk® View Machine Edition: Improper Neutralization of Special Elements used in an OS Command
A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could allow a remote attacker to run commands or code as a high privileged user.
- 8.6 High severity
FactoryTalk View Machine Edition: Incorrect Authorization
A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user.
- 7.8 High severity
A remote code execution vulnerability exists in the affected product.
A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially