CVE-2024-10944CWE-20
FactoryTalk® Updater Remote Code Execution
High · published November 12, 2024
What it is
A Remote
Code Execution vulnerability exists in the affected product. The vulnerability requires
a high level of permissions and exists due to improper input validation resulting
in the possibility of a malicious Updated Agent being deployed.
The record
Technical detail
- CVSS v4.0
- 7.1 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
- EPSS
- 0.00541 · 44.7th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2024-11-12T17:03Z
EPSS history
Timeline