PT-2015-4162

CVE-2014-9209

·

Published

2015-03-31

·

Updated

2015-03-31

Description by

CVSS 2.0
6.9
Medium
MetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Services Platform versions prior to 2.71.00 Rockwell Automation FactoryTalk View Studio versions 8.00.00 and earlier
Description The issue is related to an untrusted search path vulnerability in the Clean Utility application. This vulnerability allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Recommendations For Rockwell Automation FactoryTalk Services Platform versions prior to 2.71.00, update to version 2.71.00 or later. For Rockwell Automation FactoryTalk View Studio versions 8.00.00 and earlier, update to a version later than 8.00.00.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾