Rockwell Automation FactoryTalk Updater (Update A)

Risk Summary

Successful exploitation of these vulnerabilities could result in an authentication bypass, remote code execution, and/or a local privilege escalation

CVEs (3)

Remediations

• Rockwell Automation recommends users follow the following mitigations:
• FactoryTalk Updater - Web Client: Update to V4.20.00
• FactoryTalk Updater - Client: Update to V4.20.00
• FactoryTalk Updater - Agent: Update to V4.20.00
• Users using the affected software, FactoryTalk Updater - Client, are encouraged to apply the risk mitigations, if possible.
• Control access to the server where FactoryTalk Updater is running.
• Click the 'Scan' button, which will update the database
• For information on how to mitigate security risks on industrial automation control systems, Rockwell Automation encourage users to implement their suggested security best practices to minimize the risk of the vulnerabilities.
• Users can use Stakeholder-Specific Vulnerability Categorization to generate more environment-specific prioritization.
• For more information about these issues, please see the Rockwell Automation security advisory.

Affected Vendors

Affected Products (3)

Affected Sectors

Critical Manufacturing