CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-45824 – FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation
https://notcve.org/view.php?id=CVE-2024-45824
12 Sep 2024 — CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue. CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and a... • https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1696.html • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2024-37368 – Rockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction
https://notcve.org/view.php?id=CVE-2024-37368
14 Jun 2024 — A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. Due to the lack of proper authentication, this action is allowed without proper authentication verification. Existe una vulnerabilidad de autenticación de usuario en Rockwell Automation FactoryTalk® View SE. La vulnerabilidad permite a un usuario desde un sistema remoto con FTView enviar ... • https://https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1676.html • CWE-287: Improper Authentication •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-37367 – Rockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction
https://notcve.org/view.php?id=CVE-2024-37367
14 Jun 2024 — A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. This action is allowed without proper authentication verification. Existe una vulnerabilidad de autenticación de usuario en Rockwell Automation FactoryTalk® View SE v12. La vulnerabilidad permite a un usuario desde un sistema remoto con FTView enviar un paquete al servidor del cliente... • https://https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1675.html • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-46289 – Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation
https://notcve.org/view.php?id=CVE-2023-46289
27 Oct 2023 — Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition. Rockwell Automation FactoryTalk View Site Edition no valida suficientemente la entrada del usuario, lo que podría permitir que los actores de amenazas envíen datos maliciosos y desconecten el producto... • https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141167 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-2071 – FactoryTalk View Machine Edition Vulnerable to Remote Code Execution
https://notcve.org/view.php?id=CVE-2023-2071
12 Sep 2023 — Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets. The device has the functionality, through a CIP class, to execute exported functions from libraries. There is a routine that restricts it to execute specific functions from two dynamic link library files. By using a CIP class, an attacker can upload a self-made library to the device which allows the ... • https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140724 • CWE-20: Improper Input Validation CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-14480
https://notcve.org/view.php?id=CVE-2020-14480
24 Feb 2022 — Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials. Debido a que los nombres de usuario/contraseñas son almacenadas en texto plano en la Memoria de Acceso Aleatorio (RAM), un atacante local y autenticado podría conseguir acceso a determinadas credenciales, incluidas las de inicio de sesión de Windows • https://www.cisa.gov/uscert/ics/advisories/icsa-20-177-03 • CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-14481
https://notcve.org/view.php?id=CVE-2020-14481
24 Feb 2022 — The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE. La herramienta DeskLock proporcionada con FactoryTalk View SE usa un algoritmo de cifrado débil que puede permitir a un atac... • https://www.cisa.gov/uscert/ics/advisories/icsa-20-177-03 • CWE-261: Weak Encoding for Password CWE-326: Inadequate Encryption Strength •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2020-12031 – Rockwell Automation FactoryTalk View SE
https://notcve.org/view.php?id=CVE-2020-12031
22 Jun 2020 — In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code execution. Rockwell Automation recommends applying patch 1126290. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx. En todas las versiones de FactoryTalk View SE, después de omitir los mecanismos de corrupción de memo... • https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1126944 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVSS: 8.1EPSS: 30%CPEs: 1EXPL: 2CVE-2020-12028 – Rockwell Automation FactoryTalk View SE
https://notcve.org/view.php?id=CVE-2020-12028
22 Jun 2020 — In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPs. En todas las versiones de FactoryTalk View SEA un atacante autenticado remot... • https://packetstorm.news/files/id/160156 • CWE-264: Permissions, Privileges, and Access Controls CWE-306: Missing Authentication for Critical Function •
CVSS: 5.3EPSS: 26%CPEs: 1EXPL: 1CVE-2020-12027 – Rockwell Automation FactoryTalk View SE
https://notcve.org/view.php?id=CVE-2020-12027
22 Jun 2020 — All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this information for reconnaissance efforts. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPs. Todas las versiones de FactoryTalk View SE, divulgan los nombres de host y las rutas de... • https://packetstorm.news/files/id/160156 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •