Rockwellautomation

Factorytalk System Services

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2024-6326

  • EPSS 0.01%
  • Published 16.07.2024 17:15:12
  • Last modified 21.11.2024 09:49:26

An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, pass...

4.7

CVE-2023-2639

  • EPSS 0.04%
  • Published 13.06.2023 21:15:10
  • Last modified 21.11.2024 07:58:58

The underlying feedback mechanism of Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk Policy Manager rules to relevant devices on the network does not verify that the origin of the communication is from a legitimate ...

8.2

CVE-2023-2637

  • EPSS 0.01%
  • Published 13.06.2023 21:15:09
  • Last modified 21.11.2024 07:58:58

Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies.  Hard-coded cryptographic key may lead to privilege escalation.  This vulnerability may allow a local, authenticated non-admin u...

5

CVE-2023-2638

  • EPSS 0%
  • Published 13.06.2023 21:15:09
  • Last modified 21.11.2024 07:58:58

Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected.   Improper authorization in FTSSBackupRestore.exe may lead to the loading of malicious configuration archives.  This vulne...