An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and
Events service could open a connection, causing the service to fault and become unavailable. The affected port
could be used as a server ping port and uses messages structured with XML.
References
| Link | Resource |
|---|---|
| https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1136876 | Permissions Required Vendor Advisory |
Configurations
History
07 Nov 2023, 03:50
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML. |
31 Oct 2022, 13:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1136876 - Permissions Required, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:rockwellautomation:factorytalk_alarms_and_events:-:*:*:*:*:*:*:* | |
| First Time |
Rockwellautomation factorytalk Alarms And Events
Rockwellautomation |
|
| CWE | CWE-287 |
27 Oct 2022, 17:01
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-27 14:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-38744
Mitre link : CVE-2022-38744
CVE.ORG link : CVE-2022-38744
JSON object : View
Products Affected
rockwellautomation
- factorytalk_alarms_and_events
CWE
CWE-287
Improper Authentication