Rockwell Automation Factorytalk® View Site Edition vulnerabilities
5 vulnerabilities
Known vulnerabilities in Rockwell Automation Factorytalk® View Site Edition, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-24481rockwell automationfactorytalk® view site edition
EPSS score0.16%
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.CVE-2025-24482rockwell automationfactorytalk® view site editionEPSS score0.25%
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.CVE-2024-7513rockwell automationfactorytalk® view site edition+1EPSS score1.66%
CVE-2024-7513 IMPACT
A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions.CVE-2024-45824rockwell automationfactorytalk® view site edition+1EPSS score1.28%
CVE-2024-45824 IMPACT
A remote
code vulnerability exists in the affected products. The vulnerability occurs
when chained with Path Traversal, Command Injection, and XSS Vulnerabilities
and allows for full unauthenticated remote code execution. The link in the
mitigations section below contains patches to fix this issue.CVE-2023-46289rockwell automationfactorytalk® view site edition+1EPSS score0.90%
Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.