Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-38744

FactoryTalk Alarm and Events Server Vulnerable to Denial-Of-Service Attack

Description

An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk Alarm and Events Server

Default version status: affected

  • Allaffected

References