6.9
CVE-2014-9209
- EPSS 0.69%
- Veröffentlicht 31.03.2015 01:59:19
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginUntrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rockwellautomation ≫ Factorytalk Services Platform Version <= 2.70.00
Rockwellautomation ≫ Factorytalk View Studio Version <= 8.00.00
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.69% | 0.478 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.9 | 3.4 | 10 |
AV:L/AC:M/Au:N/C:C/I:C/A:C
|
https://ics-cert.us-cert.gov/advisories/ICSA-15-062-02
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/646323