Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-10943

FactoryTalk® Updater Authentication Bypass

Description

An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required during authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk Updater

Default version status: unaffected

  • V4.00.00-4.10.00affected

References