Improper Access Control in Rockwell Automation FactoryTalk VantagePoint

CVE-2022-38743

What is CVE-2022-38743?

Rockwell Automation's FactoryTalk VantagePoint is susceptible to an improper access control vulnerability that affects several versions. This flaw allows a malicious user, possessing only read-only privileges, to execute SQL statements in the back-end database due to misconfigured access controls. Successful exploitation of this vulnerability can lead to unauthorized access to restricted data and the potential execution of arbitrary code, posing significant risks to the integrity and confidentiality of the system. Organizations using affected versions should review their security configurations and apply necessary patches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References