CVE-2024-10945CWE-754
FactoryTalk® Updater Local Privilege Escalation
High · published November 12, 2024
What it is
A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability requires a local, low privileged threat actor to replace certain files during update and exists due to a failure to perform proper security checks before installation.
The record
Technical detail
- CVSS v4.0
- 7.0 · HIGH
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00177 · 6.9th percentile
- Weakness
- CWE-754 · Improper Check for Unusual or Exceptional Conditions
- Published
- 2024-11-12T17:06Z
EPSS history
Timeline