CVE-2024-45823CWE-287

FactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets

Critical · published September 12, 2024

CVSS v4.0
9.2
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

CVE-2024-45823 IMPACT

An

authentication bypass vulnerability exists in the affected product. The

vulnerability exists due to shared secrets across accounts and could allow a threat

actor to impersonate a user if the threat actor is able to enumerate additional

information required during authentication.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00544 · 44.9th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-09-12T14:20Z
EPSS history
Timeline
  • 12 SEP 14:20Z
    FactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets
    cvelistv5