CVE-2024-37367

HIGH 7.5CVE-2024-37367 · Published 14/06/2024 · updated 17/06/2026

In short

CVE-2024-37367 is a HIGH (CVSS 7.5) vulnerability affecting factorytalk view (rockwellautomation).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 42.7% of all vulnerabilities.
Fix: update to 14.0 or later.

Package	Affected versions	Patched versions
factorytalk view rockwellautomation	`≥ 12.0, < 14.0`	`14.0`

Description

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. This action is allowed without proper authentication verification.

References

https//www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1675.html · Broken Link

More vulnerabilities in factorytalk view

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

factorytalk view

rockwellautomation

≥ 12.0, < 14.0

14.0

More vulnerabilities in factorytalk view

See all →