Paper/Archive/CVE-2024-45824

CVE-2024-45824

Rockwell Automation FactoryTalk View Site Edition — FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 70.1.701 × 2014.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue.

Affected

ProductAffectedFixed inSource

FactoryTalk View Site Edition12.0-14.0–CNA

factorytalk_view12.0 – 14.0–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Rockwell (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Rockwell (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refrockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1696.html