Description
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions being assigned to the remote debugger port and can allow for unauthenticated access to the system configuration.
Scores
CVSS v4
7.0
EPSS
0.0003
EPSS Percentile
10.0%
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-732
Status
published
Products (1)
Rockwell Automation/FactoryTalk® View Site Edition
<V15
Published
Jan 28, 2025
Tracked Since
Feb 18, 2026