Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2634▼ 301 respecto a la semana anterior
Críticas / altas1351▲ 82 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)58▼ 469 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (1.8) | 0.18% | — | Rockwellautomation Factorytalk Policy ManagerRockwellautomation Factorytalk System Services | 16/7/2024 | 17/6/2026 | An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders when they are… | |
| Modificada | Media (4.7) | 0.38% | — | Rockwellautomation Factorytalk Policy ManagerRockwellautomation Factorytalk System Services | 13/6/2023 | 17/6/2026 | The underlying feedback mechanism of Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk Policy Manager rules to relevant devices on the network does not verify that the origin of the communication is from a legitimate local client device. This may allow a threat actor to craft a malicious… | |
| Modificada | Media (5) | 0.20% | — | Rockwellautomation Factorytalk Policy ManagerRockwellautomation Factorytalk System Services | 13/6/2023 | 17/6/2026 | Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected. Improper authorization in FTSSBackupRestore.exe may lead to the loading of malicious configuration archives. This vulnerability may allow a local, authenticated non-admin user to craft a… | |
| Modificada | Alta (8.2) | 0.20% | — | Rockwellautomation Factorytalk Policy ManagerRockwellautomation Factorytalk System Services | 13/6/2023 | 17/6/2026 | Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies. Hard-coded cryptographic key may lead to privilege escalation. This vulnerability may allow a local, authenticated non-admin user to generate an invalid administrator cookie giving them… |