Rockwellautomation Factorytalk System Services vulnerabilities

4 CVEs affecting Rockwellautomation Factorytalk System Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6326, published 2024-07-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-2639, published 2023-06-13. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. The underlying feedback mechanism of Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk Policy Manager rules to relevant devices on the network does not verify that…
CVE-2023-2637, published 2023-06-13. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies. Hard-coded cryptographic key may lead to privilege escalation. This…
CVE-2023-2638, published 2023-06-13. Medium severity, CVSS 5.0. EPSS: 0.2% chance of exploitation in the next 30 days. Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected. Improper authorization in FTSSBackupRestore.exe may lead to the…
CVE-2024-6326, published 2024-07-16. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore…