Read the docs
TI-2024-04291 Aliases CVE-2024-4609GHSA-qwjm-p7qm-cgm9

Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability

Priority MEDIUM 47CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
SQL injection
Confidentiality · integrity · availability
High · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00652 51st percentileScored 2026-11-07
Fix Fixed FactoryTalk® View SE (Rockwell Automation): 14

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RockwellFactoryTalk® View SEbefore 1414Patch availableCNA
  • FactoryTalk® View SE VendorRockwell Affected before 14 Fixed in 14 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:rockwellautomation:factorytalk_view:*:*:*:*:se:*:*:*before 11.0VulnerableRockwell
  • cpe:2.3:a:rockwellautomation:factorytalk_view:*:*:*:*:se:*:*:* Versions before 11.0 Vulnerable ·Rockwell

Remediation

  • Fix · CNA FactoryTalk® View SE (Rockwell Automation) Fixed in 14

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-4609
  2. 2026-10-03 Alias added: GHSA-qwjm-p7qm-cgm9
  3. 2026-10-14 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2020-09688 Improper input validation in Rockwell FactoryTalk View SE CVSS 3.1CRITICAL 9.0
  • TI-2020-09687 Access control flaw in Rockwell FactoryTalk View SE CVSS 3.1HIGH 8.1
  • TI-2023-01947 FactoryTalk View Machine Edition Vulnerable to Remote Code Execution CVSS 3.1CRITICAL 9.8
  • TI-2020-09686 Information disclosure in Rockwell FactoryTalk View SE CVSS 3.1MEDIUM 4.3
  • TI-2024-30786 FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation CVSS 4.0CRITICAL 9.2
  • TI-2024-24878 Rockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction CVSS 4.0HIGH 8.2
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences