FactoryTalk® View SE vulnerabilities

4 known vulnerabilities in FactoryTalk® View SE from Rockwell Automation. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  FactoryTalk® View SE: Incorrect Permission Assignment for Critical Resource

  CVE-2024-37369Jun 14, 2024Rockwell Automation

  A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edit scripts, bypassing Access Control Lists, and potentially gaining further access within the system.

• 7.5 High severity

  FactoryTalk® View SE: Missing Authentication for Critical Functionality

  CVE-2024-37368Jun 14, 2024Rockwell Automation

  A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. Due to the lack of proper authenticat

• 7.5 High severity

  FactoryTalk® View SE: Improper Authentication

  CVE-2024-37367Jun 14, 2024Rockwell Automation

  A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. This action is allowed without pr

• 9.8 Critical severity

  FactoryTalk® View SE: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-4609May 16, 2024Rockwell Automation

  A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploite