Skip to content
Sign in
CVE-2024-373688.2HighCWE-287

CVE-2024-37368: Rockwell Automation FactoryTalk® View SE v11 Information Leakage Vulnerability via Authentication Restriction

Rockwell Automation · FactoryTalk® View SE

Vendor fix available · Affected: Rockwell Automation FactoryTalk® View SE · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.5%probability of exploitation in the next 30 days
43rd percentile
050100

Higher than 43% of scored CVEs

8.2HighCVSS 4.0
LowHigh

DescriptionCVE.org

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. Due to the lack of proper authentication, this action is allowed without proper authentication verification.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Rockwell Automation · FactoryTalk® View SEv11.0

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Published
June 2024

CoverageNo articles yet

No CyberSIXT article names CVE-2024-37368 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in