PT-2016-6005 · Rockwell Automation · Factorytalk Energymetrix

Published 2016-07-28 · Updated 2016-11-28 · CVE-2016-4531

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk EnergyMetrix versions prior to 2.20.00

Description The issue allows remote attackers to gain access by exploiting an unattended workstation, as credentials are not invalidated upon logout.

Recommendations For versions prior to 2.20.00, update to version 2.20.00 or later to resolve the issue.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2016-4531

Affected Products

Factorytalk Energymetrix

References · 4

• https://osv.dev/vulnerability/CVE-2016-4531 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4531 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-173-03 · Note
• http://securityfocus.com/bid/92135 · Note