CVE-2024-45824

CRITICAL

9.8

Beschreibung

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht9/12/2024

Zuletzt geandert1/31/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

rockwellautomation:factorytalk_view

Schwachen (CWE)

CWE-77CWE-77

Referenzen

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1696.html(PSIRT@rockwellautomation.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.