This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-37365 | BDVDB-2026-254644 Detail

Rockwell AutomationFactoryTalk View Machine Edition

Description#

A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escalate their privileges by changing the macro to execute arbitrary code.

Impact#

CAPEC-242 Code Injection

Weaknesses#

  • CWE-20 Improper Input Validation

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.