Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2024-45824

FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Rockwell

Description

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk View Site Edition

Default version status: unaffected

  • 12.0-14.0affected

References