CVE-2017-14022CWE-20

An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier

published December 23, 2017

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier. An unauthenticated attacker with remote access to a network with FactoryTalk Alarms and Events can send a specially crafted set of packets packet to Port 403/TCP (the history archiver service), causing the service to either stall or terminate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04217 · 90.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2017-12-23T00:00Z
EPSS history
Timeline
  • 23 DEC 00:00Z
    An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier
    cvelistv5