RockwellAutomation FactoryTalk View SE
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwellautomation:factorytalk_view:-:*:*:*:se:*:*:*
part: a version: - update: *
| Vendor | Rockwellautomation (483fb14e-bfe0-5dc5-b460-aca202063cba) |
|---|---|
| Product | Factorytalk View (090552bd-437f-5666-9a3f-e3987aa07682) |
| Edition | * |
| Language | * |
| Software edition | se |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-37369 |
vulnerable | 2026-06-08 06:39:47.302611 |
Rockwell Automation FactoryTalk® View SE Local Privilege Escalation Vulnerability via Local File Permissions
A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edit scripts, bypassing Access Control Lists, and potentially gaining further access within the system.
Published: 2024-06-14T16:50:20.187Z
Updated: 2024-08-02T03:50:56.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37368 |
vulnerable | 2026-06-08 06:39:47.301891 |
Rockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. Due to the lack of proper authentication, this action is allowed without proper authentication verification.
Published: 2024-06-14T14:30:53.422Z
Updated: 2024-08-02T03:50:56.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12029 |
vulnerable | 2026-06-08 05:17:56.222078 |
Rockwell Automation FactoryTalk View SE
CRITICAL (9)
All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory. A remote, unauthenticated attacker may be able to execute a crafted file on a remote endpoint that may result in remote code execution (RCE). Rockwell Automation recommends applying patch 1126289. Before installing this patch, the patch rollup dated 06 Apr 2020 or later MUST be applied. 1066644 – Patch Roll-up for CPR9 SRx.
Published: 2020-07-20T14:56:42.195Z
Updated: 2024-09-16T22:02:56.282Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.