CVE-2022-3158

ALTO 8.8CVE-2022-3158 · Published 17/10/2022 · updated 17/06/2026

In breve

CVE-2022-3158 è una vulnerabilità ALTO (CVSS 8.8) che riguarda factorytalk vantagepoint (rockwellautomation).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.0%, superiore al 90.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
factorytalk vantagepoint rockwellautomation	`= 8.0= 8.10= 8.20= 8.30= 8.31`	No fix yet

Description

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully exploited, this could allow a user with basic user privileges to perform remote code execution on the server.

References

rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137043 · Permissions Required

Altre vulnerabilità di factorytalk vantagepoint

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free