TI-2024-05870 Aliases CVE-2024-6326 GHSA-gv63-8gqg-3525

Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services

LOW 9CWE-269Published 2024-07-16 · Updated 2024-08-01

Key facts

Attack vector: Local
Privileges required: Low
User interaction: Active
Attack complexity: Low
Attack requirements: Present
Impact type: Privilege escalation
Confidentiality · integrity · availability: None · None · None
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders when they are temporarily copied to an interim folder. This vulnerability is due to the lack of explicit permissions set on the backup folder. If private keys are obtained by a malicious user, they could impersonate resources on the secured network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00176 7th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Rockwell	FactoryTalk® System Services (installed via FTPM)	v6.40	—	No fix listed	CNA
Rockwell	FactoryTalk® Policy Manager (FTPM)	v6.40	—	No fix listed	CNA

FactoryTalk® System Services (installed via FTPM) VendorRockwell Affected v6.40 Fixed in — No fix listed CNA
FactoryTalk® Policy Manager (FTPM) VendorRockwell Affected v6.40 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:rockwellautomation:factorytalk_policy_manager:6.40.0:::::::*	6.40.0	Vulnerable	Rockwell
cpe:2.3:a:rockwellautomation:factorytalk_system_services:6.40.0:::::::*	6.40.0	Vulnerable	Rockwell

cpe:2.3:a:rockwellautomation:factorytalk_policy_manager:6.40.0:*:*:*:*:*:*:* Versions 6.40.0 Vulnerable ·Rockwell
cpe:2.3:a:rockwellautomation:factorytalk_system_services:6.40.0:*:*:*:*:*:*:* Versions 6.40.0 Vulnerable ·Rockwell

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-6326
2026-10-03 Alias added: GHSA-gv63-8gqg-3525

References

Advisory 1

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1678.html

TI-2023-02466 Rockwell Automation FactoryTalk System Services Vulnerable To Use Of Hard-Coded Cryptographic Key CVSS 3.1HIGH 8.2
TI-2024-05869 Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services CVSS 4.0MEDIUM 6.0
TI-2023-02467 Rockwell Automation FactoryTalk System Services Vulnerable to a Denial-of-Service Attack CVSS 3.1MEDIUM 5.9
TI-2023-02468 Rockwell Automation FactoryTalk System Services Vulnerable to Sensitive Information Disclosure CVSS 3.1MEDIUM 4.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences