ICSA-24-165-18
·
Published 2024-06-13
·
View on CISA ICS-CERT ↗
Rockwell Automation FactoryTalk View SE
CVSS 7.5
HIGH
Risk Summary
Successful exploitation of this vulnerability could allow a user from a remote system with FTView to view an HMI project.
CVEs (1)
Remediations
- Rockwell Automation has corrected this problem in V14.0.
- Rockwell Automation encourages users of the affected software, who are not able to upgrade to one of the corrected versions, to apply the risk mitigations where possible:
- Enforce proper access controls within the network and segment networks containing sensitive information using IPSec:
- Security Best Practices
- For more information, see Rockwell Automation's security advisory
Affected Vendors
Rockwell Automation
Affected Products (1)
Rockwell Automation
·
FactoryTalk View SE
v11.0
Affected Sectors
Critical Manufacturing
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more