PT-2015-4162 · Rockwell Automation · Factorytalk Services Platform+1

Publicado 2015-03-31 · Atualizado 2015-03-31 · CVE-2014-9209

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Services Platform versions prior to 2.71.00 Rockwell Automation FactoryTalk View Studio versions 8.00.00 and earlier

Description The issue is related to an untrusted search path vulnerability in the Clean Utility application. This vulnerability allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.

Recommendations For Rockwell Automation FactoryTalk Services Platform versions prior to 2.71.00, update to version 2.71.00 or later. For Rockwell Automation FactoryTalk View Studio versions 8.00.00 and earlier, update to a version later than 8.00.00.

Correção

Identificadores relacionados

CVE-2014-9209

Produtos afetados

Factorytalk Services Platform

Factorytalk View Studio

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-9209 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-062-02 · Nota
• https://rockwellautomation.custhelp.com/app/answers/detail/a_id/646323 · Nota