Factorytalk View
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwellautomation:factorytalk_view:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba) |
|---|---|
| Product | Factorytalk View (090552bd-437f-5666-9a3f-e3987aa07682) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4609 |
vulnerable | 2026-06-08 06:50:18.266180 |
Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime.
Published: 2024-05-16T15:13:45.048Z
Updated: 2024-08-01T20:47:41.128Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45824 |
vulnerable | 2026-06-08 06:48:09.080653 |
FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation
CRITICAL (9.8)
CVE-2024-45824 IMPACT
A remote
code vulnerability exists in the affected products. The vulnerability occurs
when chained with Path Traversal, Command Injection, and XSS Vulnerabilities
and allows for full unauthenticated remote code execution. The link in the
mitigations section below contains patches to fix this issue.
Published: 2024-09-12T14:05:22.202Z
Updated: 2024-09-12T15:07:31.980Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.