FV
Product
Factorytalk View
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 3Low 0
Watch
Add Factorytalk View to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9063 | 9.8 | Oct 14 | An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control Affected: through 15.0 |
| CVE-2024-45824 | 9.8 | Sep 12 | CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products Affected: 12.0 through 14.0 |
| CVE-2024-4609 | 9.8 | May 16 | A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has… Affected: before 11.0 |
| CVE-2023-2071 | 9.8 | Sep 12 | Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed… Affected: through 13.0 |
| CVE-2025-9064 | 9.1 | Oct 14 | A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as the device to delete any file within the… Affected: through 15.0 |
| CVE-2024-7513 | 8.8 | Aug 14 | CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product Affected: 13.0 and later |
| CVE-2024-37369 | 8.8 | Jun 14 | A privilege escalation vulnerability exists in the affected product Affected: 12.0 before 14.0 |
| CVE-2020-12028 | 8.1 | Jul 20 | In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those… Affected: All versions, or not specified |
| CVE-2024-37365 | 7.8 | Nov 12 | A remote code execution vulnerability exists in the affected product Affected: 14.0 |
| CVE-2020-14481 | 7.8 | Feb 24 | The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the… Affected: through 9.0; 10.0 |
| CVE-2020-12031 | 7.8 | Jul 20 | In all versions of FactoryTalk View SE, after bypassing memory corruption mechanisms found in the operating system, a local, authenticated attacker may corrupt the associated… Affected: All versions, or not specified |
| CVE-2020-12029 | 7.8 | Jul 20 | All versions of FactoryTalk View SE do not properly validate input of filenames within a project directory Affected: All versions, or not specified |
| CVE-2024-37368 | 7.5 | Jun 14 | A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE Affected: 11.0 before 14.0 |
| CVE-2024-37367 | 7.5 | Jun 14 | A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12 Affected: 12.0 before 14.0 |
| CVE-2023-46289 | 7.5 | Oct 27 | Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product… Affected: 11.0 through 13.0 |
| CVE-2020-14480 | 5.5 | Feb 24 | Due to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local, authenticated attacker could gain access to certain credentials, including Windows… Affected: through 9.0; 10.0 |
| CVE-2024-21914 | 5.3 | Mar 25 | A vulnerability exists in the affected product that allows a malicious user to restart the Rockwell Automation PanelView™ Plus 7 terminal remotely without security protections Affected: before 14.0 |
| CVE-2020-12027 | 4.3 | Jul 20 | All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system Affected: All versions, or not specified |
Showing 18