CVE-2024-10945 | BDVDB-2026-254580 Detail
Rockwell AutomationFactoryTalk Updater
Description#
A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability requires a local, low privileged threat actor to replace certain files during update and exists due to a failure to perform proper security checks before installation.
Impact#
CAPEC-233 Privilege Escalation
Weaknesses#
- CWE-754 Improper Check for Unusual or Exceptional Conditions
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.