Factorytalk View
Monthly
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Unauthenticated attackers with network access to the same segment as a Rockwell Automation FactoryTalk View Machine Edition panel can exploit a path traversal flaw to delete arbitrary files within the panel's operating system, degrading availability of the HMI/operator station. The CVSS 4.0 score is 8.7 (AV:N/PR:N/UI:N/VA:H), but our independent assessment rates it 7.1 (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) because practical reachability is adjacent/OT-network rather than internet-wide, and exploitation hinges on the attacker already knowing exact filenames - no directory enumeration or integrity/confidentiality impact is described. There is no CISA KEV listing and no public exploit code identified at time of analysis; EPSS is low at 0.61% (47th percentile), so mass scanning is unlikely, but targeted OT intrusions remain a realistic vector.
Local, low-privileged attackers can bypass authentication in the Web Browser ActiveX control shipped with Rockwell Automation FactoryTalk View Machine Edition, the runtime used on PanelView Plus 7 Series B operator terminals, gaining unauthorized access to the device file system, diagnostic data, and event logs. Exploitation requires local access to the HMI terminal plus an existing low-privilege foothold (CVSS 3.1: AV:L/AC:L/PR:L/UI:N, C:H/I:L/A:H), so it is not a remote unauthenticated attack despite the 'authentication bypass' label. No public exploit code and no confirmed active exploitation were identified at time of analysis, and EPSS is low at 0.39% (30th percentile), making this a moderate-priority OT risk contingent on physical or local network proximity.
A remote code execution vulnerability exists in the affected product. Rated high severity (CVSS 7.0), this vulnerability is low attack complexity. No vendor patch available.
CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. No vendor patch available.
A privilege escalation vulnerability exists in the affected product. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. No vendor patch available.
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability exists in the affected product that allows a malicious user to restart the Rockwell Automation PanelView™ Plus 7 terminal remotely without security protections. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Unauthenticated attackers with network access to the same segment as a Rockwell Automation FactoryTalk View Machine Edition panel can exploit a path traversal flaw to delete arbitrary files within the panel's operating system, degrading availability of the HMI/operator station. The CVSS 4.0 score is 8.7 (AV:N/PR:N/UI:N/VA:H), but our independent assessment rates it 7.1 (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) because practical reachability is adjacent/OT-network rather than internet-wide, and exploitation hinges on the attacker already knowing exact filenames - no directory enumeration or integrity/confidentiality impact is described. There is no CISA KEV listing and no public exploit code identified at time of analysis; EPSS is low at 0.61% (47th percentile), so mass scanning is unlikely, but targeted OT intrusions remain a realistic vector.
Local, low-privileged attackers can bypass authentication in the Web Browser ActiveX control shipped with Rockwell Automation FactoryTalk View Machine Edition, the runtime used on PanelView Plus 7 Series B operator terminals, gaining unauthorized access to the device file system, diagnostic data, and event logs. Exploitation requires local access to the HMI terminal plus an existing low-privilege foothold (CVSS 3.1: AV:L/AC:L/PR:L/UI:N, C:H/I:L/A:H), so it is not a remote unauthenticated attack despite the 'authentication bypass' label. No public exploit code and no confirmed active exploitation were identified at time of analysis, and EPSS is low at 0.39% (30th percentile), making this a moderate-priority OT risk contingent on physical or local network proximity.
A remote code execution vulnerability exists in the affected product. Rated high severity (CVSS 7.0), this vulnerability is low attack complexity. No vendor patch available.
CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. No vendor patch available.
A privilege escalation vulnerability exists in the affected product. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. No vendor patch available.
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability exists in the affected product that allows a malicious user to restart the Rockwell Automation PanelView™ Plus 7 terminal remotely without security protections. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.