CVE-2025-24481CWE-732

FactoryTalk® View Site Edition - Incorrect Permission Assignment

High · published January 28, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.00163 · 5.3th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-01-28T20:55Z
EPSS history
Timeline
  • 28 JAN 20:55Z
    FactoryTalk® View Site Edition - Incorrect Permission Assignment
    cvelistv5