Rockwell Automation FactoryTalk Activation

Risk Summary

REPOSTED INFORMATION

CVEs (1)

Remediations

• Rockwell Automation has released a new version of FactoryTalk Activation, Version 4.01, which addresses the identified vulnerability. Rockwell Automation recommends upgrading to the latest version of FactoryTalk Activation, Version 4.01 or later, which is available at the following location:
• If unable to upgrade to the latest version, users should read Knowledgebase Article KB939382, which describes how to identify whether the service path contains spaces (i.e., is vulnerable); how to manually address this vulnerability through a registry edit; and the article describes the process of doing such edits.
• Rockwell Automation's Knowledgebase Article KB939382 is available at the following location:
• Rockwell Automation recommends, where feasible, the precautions and risk mitigation strategies to this type of attack, like those listed below.
• Follow industry best-practices to harden PCs and servers, including antivirus/anti-malware and application whitelisting solutions. These recommendations are published in Knowledgebase Article KB546987, which is available at the following location:
• Use trusted software, software patches, antivirus/anti-malware programs, and interact only with trusted web sites and attachments.
• Employ training and awareness programs to educate users on the warning signs of a phishing or social engineering attack.

Affected Vendors

Affected Products (30)

Affected Sectors

Chemical, Critical Manufacturing, Food and Agriculture, Water and Wastewater Systems