CVE-2022-38743

ALTO 8.8CVE-2022-38743 · Published 17/10/2022 · updated 17/06/2026

In breve

CVE-2022-38743 è una vulnerabilità ALTO (CVSS 8.8) che riguarda factorytalk vantagepoint (rockwellautomation).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 79.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
factorytalk vantagepoint rockwellautomation	`= 8.0= 8.10= 8.20= 8.30= 8.31`	No fix yet

Description

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. If successfully exploited, this could allow the attacker to execute arbitrary code and gain access to restricted data.

References

rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137043 · Permissions Required

Altre vulnerabilità di factorytalk vantagepoint

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free