Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2024-6325

Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services

Description

The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html  by implementing CIP security and did not update to the versions of the software CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html  and CVE-2022-1161. https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk® System Services (installed via FTPM)

Default version status: unaffected

  • 6.40affected

Rockwell Automation FactoryTalk® Policy Manager (FTPM)

Default version status: unaffected

  • v6.40affected

References