CVE-2024-10944

Summary

A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due to improper input validation resulting in the possibility of a malicious Updated Agent being deployed.

Affected Software

Weaknesses

• CWE-20: CWE-20 Improper Input Validation

Workarounds

• Control access to the server where FactoryTalk® Updater is running.
• Click the ‘Scan’ button, which will update the database

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1710.html

• ←Previous
• Next→