CVE-2024-37369: Rockwell Automation FactoryTalk® View SE Local Privilege Escalation Vulnerability via Local File Permissions
Published Jun 14, 2024
·Updated
A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edit scripts, bypassing Access Control Lists, and potentially gaining further access within the system.
Affected Software
2 affected components
rockwellautomation Factorytalk View>=12.0<14.0
Rockwell Automation FactoryTalk View SE
Remediation
Information
AFFECTED PRODUCTS AND SOLUTION
Affected Product
First Known in software version
Corrected in software version
FactoryTalk® View SE
V12.0
v14
Mitigations and Workarounds
Users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
* Use the Secure Install option when installing FactoryTalk® Services Platform.
* Security Best Practices https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight
Event History
Jun 14, 2024
CVE Published
via MITRE·04:50 PM
Data Sourced
via MITRE·04:50 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-37369?
The severity of CVE-2024-37369 is critical as it allows low-privilege users to bypass Access Control Lists.
2
How do I fix CVE-2024-37369?
To fix CVE-2024-37369, upgrade Rockwell Automation FactoryTalk View SE to a version above 14.0.
3
Who is affected by CVE-2024-37369?
CVE-2024-37369 affects users of Rockwell Automation FactoryTalk View SE versions between 12.0 and 14.0.
4
What type of vulnerability is CVE-2024-37369?
CVE-2024-37369 is a privilege escalation vulnerability.
5
Can CVE-2024-37369 lead to further access within the system?
Yes, CVE-2024-37369 allows low-privilege users to edit scripts, potentially gaining further unauthorized access.