Known vulnerabilities in FactoryTalk VantagePoint
Vendor:
Rockwell Automation
Software:
FactoryTalk VantagePoint
Software CPE:
cpe:2.3:a:rockwell_automation:factorytalk_vantagepoint:*:*:*:*:*:*:*:*
Website:
https://www.rockwellautomation.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU76372 - Cross-Site Request Forgery (CSRF) CVE-2023-2444 |
CWE-352 | Low | 8.40 | 19.05.2023 |
SB2023051930 |
||
| #VU67981 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-3158 |
CWE-89 | Medium | 8.0, 8.10, 8.20, 8.30, 8.31 | 07.10.2022 |
SB2022100710 |
||
| #VU67980 - Improper Access Control CVE-2022-38743 |
CWE-284 | Medium | 8.0, 8.10, 8.20, 8.30, 8.31 | 07.10.2022 |
SB2022100710 |