CVE-2022-3158: SQL Injection
First published: Mon Oct 17 2022(Updated: )
Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully exploited, this could allow a user with basic user privileges to perform remote code execution on the server.
Credit: PSIRT@rockwellautomation.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rockwellautomation Factorytalk Vantagepoint | =8.0 | |
| Rockwellautomation Factorytalk Vantagepoint | =8.10 | |
| Rockwellautomation Factorytalk Vantagepoint | =8.20 | |
| Rockwellautomation Factorytalk Vantagepoint | =8.30 | |
| Rockwellautomation Factorytalk Vantagepoint | =8.31 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-3158?
CVE-2022-3158 is a vulnerability in Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, and 8.31.
What is the severity of CVE-2022-3158?
CVE-2022-3158 has a severity rating of 8.8 (high).
How does CVE-2022-3158 affect Rockwell Automation FactoryTalk VantagePoint?
CVE-2022-3158 affects Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, and 8.31 by allowing unauthorized retrieval of information from the back-end database through SQL statements.
How can I fix CVE-2022-3158?
To fix CVE-2022-3158, it is recommended to update to a patched version provided by Rockwell Automation.
Where can I find more information about CVE-2022-3158?
More information about CVE-2022-3158 can be found at the following link: [CVE-2022-3158](https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137043).
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/severity
- agent/author
- agent/first-publish-date
- agent/tags
- agent/description
- agent/event
- agent/source
- vendor/rockwellautomation
- canonical/rockwellautomation factorytalk vantagepoint
- version/rockwellautomation factorytalk vantagepoint/8.0
- version/rockwellautomation factorytalk vantagepoint/8.10
- version/rockwellautomation factorytalk vantagepoint/8.20
- version/rockwellautomation factorytalk vantagepoint/8.30
- version/rockwellautomation factorytalk vantagepoint/8.31