Rockwell Automation Factorytalk View Site Edition vulnerabilities

CVE-2024-45824 [CRITICAL] CWE-77 CVE-2024-45824: CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerabil CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue.

CVE-2024-7513 [HIGH] CWE-732 CVE-2024-7513: CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerabili CVE-2024-7513 IMPACT A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions.

CVE-2023-46289 [HIGH] CWE-20 CVE-2023-46289: Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data bringing the product offline. If exploited, the product would become unavailable and require a restart to recover resulting in a denial-of-service condition.

CVE-2025-24481 [HIGH] CWE-732 CVE-2025-24481: An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.

CVE-2025-24482 [HIGH] CWE-94 CVE-2025-24482: A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerabili A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions.