Vulnerabilities (CVE)

Filtered by vendor Rockwellautomation Subscribe
Filtered by product Factorytalk Alarms And Events
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-38744 1 Rockwellautomation 1 Factorytalk Alarms And Events 2023-12-10 N/A 7.5 HIGH
An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML.
CVE-2017-14022 1 Rockwellautomation 1 Factorytalk Alarms And Events 2023-12-10 5.0 MEDIUM 7.5 HIGH
An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier. An unauthenticated attacker with remote access to a network with FactoryTalk Alarms and Events can send a specially crafted set of packets packet to Port 403/TCP (the history archiver service), causing the service to either stall or terminate.