CVE-2022-38744 — FactoryTalk Alarm and Events Server Vulnerable to Denial-Of-Service Attack

CVE-2022-38744

FactoryTalk Alarm and Events Server Vulnerable to Denial-Of-Service Attack PUBLISHED

Description (CNA)

An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / FactoryTalk Alarm and Events Server	affected All

CWE

CWE-287

References

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1136876

ADP enrichment

CVE

No English description supplied.

https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1136876

CISA-ADP

No English description supplied.

No references supplied.