EUVD-2026-69145
GHSA-h4cr-jvp7-9897
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent-only access and high-privilege authentication confirmed by CVSS 4.0 vector; impact is availability-only crash with no confidentiality or integrity effect.
Primary rating from Vendor (Rockwell).
CVSS VectorVendor: Rockwell
Lifecycle Timeline
1DescriptionCVE.org
A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive.
AnalysisAI
Denial-of-service vulnerability in Rockwell Automation FactoryTalk® Historian Machine Edition allows a network-adjacent, high-privilege authenticated attacker to crash the device by sending crafted requests to its web interface, triggering a stack-based buffer overflow (CWE-121) that renders the historian unresponsive. All versions appear affected per the CPE wildcard, and the impact is limited to availability - no confidentiality or integrity compromise is possible. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two specific, concurrent prerequisites: (1) the attacker must be network-adjacent - on the same network segment, VLAN, or broadcast domain as the historian; internet-based remote exploitation is not possible given AV:A in the confirmed CVSS 4.0 vector; (2) the attacker must possess high-privilege (PR:H) authenticated credentials to the FactoryTalk® Historian Machine Edition web interface - unauthenticated exploitation is not possible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 4.8 (Medium) accurately reflects a meaningfully constrained attack surface: AV:A limits exploitation to hosts on the same network segment or VLAN (not internet-routable), PR:H requires the attacker to already hold high-privilege authenticated credentials to the web interface, and the sole impact is VA:L - a low-severity availability disruption. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult Rockwell Automation Security Advisory SD1796 at https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1796.html for the authoritative patch version and upgrade instructions - no exact fixed version is confirmed from available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today