PT-2024-4262 · Rockwell Automation · Rockwell Automation Factorytalk View Se

Published 2024-06-13 · Updated 2024-08-16 · CVE-2024-37367

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View SE version v12

Description The issue is related to weaknesses in the authentication procedure of the Rockwell Automation FactoryTalk View SE software. This allows a remote attacker to potentially disclose protected information by sending a packet to the customer's server to view an HMI project without proper authentication verification.

Recommendations For Rockwell Automation FactoryTalk View SE version v12, consider restricting access to the HMI project viewing functionality until a proper fix is applied to ensure authentication verification is properly enforced. As a temporary workaround, limit the ability of remote systems with FTView to send packets to the customer's server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2024-04749

CVE-2024-37367

Affected Products

Rockwell Automation Factorytalk View Se

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-37367 · Security Note
• https://bdu.fstec.ru/vul/2024-04749 · Security Note
• https://osv.dev/vulnerability/CVE-2024-37367 · Vendor Advisory
• https://https//www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1675.html · Note
• https://t.me/true_secator/5858 · Telegram Post
• https://rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1675.html · Note
• https://cisa.gov/news-events/ics-advisories/icsa-24-165-16 · Note
• https://twitter.com/CVEnew/status/1801673799903154459 · Twitter Post