Rockwell Automation FactoryTalk Historian ThingWorx

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to launch XXE-based attacks on applications that accept malicious log4net configuration files.

CVEs (1)

Remediations

• Rockwell Automation released a product update addressing this vulnerability:
• 95057C-FTHTWXCT11: Versions v5.00.00 and later
• For information on how to mitigate security risks on industrial automation control systems, Rockwell Automation encourages users to implement their suggested security best practices to minimize the risk of the vulnerability.
• For more information, see Rockwell Automation Security Advisory SD1728.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing