Login Request a demo
Critical severity · published Sep 12, 2024
CVE-2024-45824
CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products
9.8
CVSS
1.3%
EPSS
No
On KEV
Description
CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FV
Factorytalk View · Rockwellautomation
12.0 through 14.0 · source: NVD
Affected product
FV
Factorytalk View
Rockwellautomation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-45824
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-45824
Vendor Advisory
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1696.html
More from Factorytalk View
9.8
CVE-2025-9063
An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control
9.8
CVE-2024-4609
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has…
9.8
CVE-2023-2071
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed…
9.1
CVE-2025-9064
A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the…
8.8
CVE-2024-7513
CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product