CVE-2025-24479CWE-863

FactoryTalk® View Machine Edition - Local Code Injection

High · published January 28, 2025

CVSS v4.0
8.6
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00174 · 6.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-01-28T18:52Z
EPSS history
Timeline
  • 28 JAN 18:52Z
    FactoryTalk® View Machine Edition - Local Code Injection
    cvelistv5