CVE-2025-24482CWE-94

FactoryTalk® View Site Edition - Local Code Injection

High · published January 28, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.00252 · 15.8th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-01-28T20:59Z
EPSS history
Timeline
  • 28 JAN 20:59Z
    FactoryTalk® View Site Edition - Local Code Injection
    cvelistv5