Rockwell Automation FactoryTalk View SE

Summary:

A vulnerability has been identified in Rockwell Automation's FactoryTalk View SE, a monitoring software, which could allow an attacker to inject a malicious SQL statement and expose sensitive information. The vulnerability, identified as CVE-2024-4609, is rated CVSS v4 8.8, indicating it is exploitable remotely with low attack complexity. Affected versions of FactoryTalk View SE prior to 14.0 are at risk. To mitigate this vulnerability, Rockwell recommends upgrading to version 14.0, and CISA recommends minimizing network exposure, using secure remote access methods, and implementing defensive measures.