Untrusted Search Path Vulnerability in Clean Utility of Rockwell Automation Products
CVE-2014-9209

Currently unrated

Key Information:

Vendor

Rockwellautomation

Status
Factorytalk View Studio
Factorytalk Services Platform
Vendor
CVE Published:
31 March 2015

What is CVE-2014-9209?

The Clean Utility application within Rockwell Automation's FactoryTalk Services Platform is vulnerable due to an untrusted search path issue. This allows local users to exploit the system by placing a Trojan horse DLL in an unspecified directory, potentially leading to unauthorized privilege escalation. This vulnerability impacts versions of the software prior to 2.71.00 and FactoryTalk View Studio versions 8.00.00 and earlier, highlighting the importance of securing application paths to prevent malicious exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://rockwellautomation.custhelp.com/app/answers/detai...
x_refsource_MISC
https://ics-cert.us-cert.gov/advisories/ICSA-15-062-02
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.