Rockwellautomation Factorytalk Energrymetrix vulnerabilities

2 CVEs affecting Rockwellautomation Factorytalk Energrymetrix, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4531, published 2016-07-28.

More from Rockwellautomation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-4531, published 2016-07-28. High severity, CVSS 7.3. EPSS: 8.2% chance of exploitation in the next 30 days. Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for remote attackers to obtain access by leveraging an…
• CVE-2016-4522, published 2016-07-28. Critical severity, CVSS 9.8. EPSS: 6.3% chance of exploitation in the next 30 days. SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.