CVE-2024-45824 — FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation

CVE-2024-45824

FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation PUBLISHED

Description (CNA)

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / FactoryTalk View Site Edition	affected 12.0-14.0

CWE

CWE-77

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1696.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.