PT-2016-6005 · Rockwell Automation · Factorytalk Energymetrix

Publicado 2016-07-28 · Atualizado 2016-11-28 · CVE-2016-4531

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk EnergyMetrix versions prior to 2.20.00

Description The issue allows remote attackers to gain access by exploiting an unattended workstation, as credentials are not invalidated upon logout.

Recommendations For versions prior to 2.20.00, update to version 2.20.00 or later to resolve the issue.

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2016-4531

Produtos afetados

Factorytalk Energymetrix

Referências · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-16-173-03 · Nota
• https://osv.dev/vulnerability/CVE-2016-4531 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4531 · Nota de Segurança
• http://securityfocus.com/bid/92135 · Nota