FactoryTalk® View Site Edition vulnerabilities
5 known vulnerabilities in FactoryTalk® View Site Edition from Rockwell Automation. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
FactoryTalk® View Site Edition: Improper Control of Generation of Code
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.
- 7.0 High severity
FactoryTalk® View Site Edition: Incorrect Permission Assignment for Critical Resource
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.
- 9.8 Critical severity
FactoryTalk View Site Edition: Improper Neutralization of Special Elements used in a Command
CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the
- 8.8 High severity
FactoryTalk View Site Edition: Incorrect Permission Assignment for Critical Resource
CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions.
- 7.5 High severity
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which…
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to