Rockwellautomation
Rockwellautomation Factorytalk View: vulnerabilidades y CVE
Rockwellautomation Factorytalk View tiene 18 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE18
Últimos 12 meses2
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-9064 | Alta (8.7) | 0.61% | — | 14 oct 2025 | A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the panels operating system. Exploitation of… |
| CVE-2025-9063 | Alta (7) | 0.39% | — | 14 oct 2025 | An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vulnerability allows unauthorized access to the PanelView Plus 7 Series B,… |
| CVE-2024-37365 | Alta (7) | 0.22% | — | 12 nov 2024 | A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files.… |
| CVE-2024-45824 | Crítica (9.2) | 1.3% | — | 12 sept 2024 | CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full… |
| CVE-2024-7513 | Alta (8.5) | 1.7% | — | 14 ago 2024 | CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by… |
| CVE-2024-37369 | Alta (8.5) | 0.33% | — | 14 jun 2024 | A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edit scripts, bypassing Access Control Lists, and potentially gaining further access within the system. |
| CVE-2024-37368 | Alta (8.2) | 0.50% | — | 14 jun 2024 | A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI… |
| CVE-2024-37367 | Alta (8.2) | 0.50% | — | 14 jun 2024 | A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI… |
| CVE-2024-4609 | Alta (8.8) | 0.65% | — | 16 may 2024 | A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if… |
| CVE-2024-21914 | Media (5.3) | 0.66% | — | 25 mar 2024 | A vulnerability exists in the affected product that allows a malicious user to restart the Rockwell Automation PanelView™ Plus 7 terminal remotely without security protections. If the vulnerability is exploited, it… |
| CVE-2023-46289 | Alta (7.5) | 0.90% | — | 27 oct 2023 | Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would… |
| CVE-2023-2071 | Crítica (9.8) | 17% | — | 12 sept 2023 | Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets. The… |
| CVE-2020-14481 | Alta (7.8) | 0.16% | — | 24 feb 2022 | The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords.… |
| CVE-2020-14480 | Media (5.5) | 0.27% | — | 24 feb 2022 | Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials. |
| CVE-2020-12031 | Alta (7.8) | 0.60% | — | 20 jul 2020 | In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated memory space allowing for arbitrary code… |
| CVE-2020-12028 | Alta (8.1) | 53% | — | 20 jul 2020 | In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate… |
| CVE-2020-12027 | Media (4.3) | 53% | — | 20 jul 2020 | All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this information for reconnaissance efforts.… |
| CVE-2020-12029 | Alta (7.8) | 47% | — | 20 jul 2020 | All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Rockwellautomation
Arena · 46Micrologix 1400 B Firmware · 22Thinmanager · 17Factorytalk Linx · 14Factorytalk Services Platform · 14Micrologix 1100 Firmware · 14Guardlogix 5580 Firmware · 13Controllogix 5580 Firmware · 13Compactlogix 5380 Firmware · 12Factorytalk Assetcentre · 12Compactlogix 5480 Firmware · 11Micrologix 1400 Firmware · 11