Rockwell

All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory.

In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissio…

Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets.

All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system.

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitim…

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products.

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE.

CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product.

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline.

A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system.

A privilege escalation vulnerability exists in the affected product.

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12.

The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords.

In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code exec…

A remote code execution vulnerability exists in the affected product.

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control.

A vulnerability exists in the affected product that allows a malicious user to restart the Rockwell Automation PanelView™ Plus 7 terminal remotely without security protections.

Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials.