PT-2024-4254 · Rockwell Automation · Rockwell Automation Factorytalk View Se

Published 2024-06-13 · Updated 2024-06-20 · CVE-2024-37368

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View SE (affected versions not specified)

Description The issue is related to weaknesses in the authentication procedure of the Rockwell Automation FactoryTalk View SE software. This allows a remote attacker to bypass existing security restrictions. Specifically, due to the lack of proper authentication, a user from a remote system with FTView can send a packet to the customer's server to view an HMI project without proper authentication verification.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

BDU:2024-04741

CVE-2024-37368

Affected Products

Rockwell Automation Factorytalk View Se

References · 9

• https://bdu.fstec.ru/vul/2024-04741 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-37368 · Security Note
• https://osv.dev/vulnerability/CVE-2024-37368 · Vendor Advisory
• https://https//www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1676.html · Vendor Advisory
• https://twitter.com/rtphokie/status/1803828920468353475 · Twitter Post
• https://t.me/true_secator/5858 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-165-18 · Note
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1676.html · Note
• https://twitter.com/CVEnew/status/1801673797118083452 · Twitter Post