Rockwellautomation Factorytalk Vantagepoint vulnerabilities

3 CVEs affecting Rockwellautomation Factorytalk Vantagepoint, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-2444, published 2023-05-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-3158, published 2022-10-17. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation…
CVE-2022-38743, published 2022-10-17. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could…
CVE-2023-2444, published 2023-05-11. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A cross site request forgery vulnerability exists in Rockwell Automation's FactoryTalk Vantagepoint. This vulnerability can be exploited in two ways. If an attacker sends a malicious link to a…