Rockwell Automation Multiple Product Vulnerability Bulletin (SD1698-SD1712)

From this webpage screenshot, the following key information about vulnerabilities can be obtained: 1. Vulnerability List: - SD1712: Third-party remote code execution vulnerability in Verve Reporting. - SD1711: Input validation vulnerability in Arena Input Analyzer. - SD1710: Multiple vulnerabilities in FactoryTalk Updater. - SD1709: Remote code execution vulnerability in FactoryTalk View ME via Project Save Path. - SD1708: Multiple vulnerabilities in ThinManager. - SD1707: Denial of service vulnerability in ControlLogix via CIP messages. - SD1705: CIP security denial of service vulnerability in PowerFlex 6000T. - SD1706: Denial of service vulnerability in Logix controllers. - SD1704: Unauthorized access vulnerability in Verve Asset Manager. - SD1703: Third-party vulnerability in DataMosaix Private Cloud. - SD1702: Sensitive data exposure and privilege escalation vulnerability in DataMosaix Private Cloud. - SD1699: Denial of service vulnerability in 5015-U8IHFT via CIP messages. - SD1698: Authentication bypass vulnerability in FactoryTalk Batch View via shared key. - SD1700: Code execution vulnerability in ThinManager. 2. Vulnerability Severity: - Critical: Severity 9.0–10.0 (72 vulnerabilities). - High: Severity 7.0–8.9 (151 vulnerabilities). - Medium: Severity 4.0–6.9 (64 vulnerabilities). - Low: Severity 0.1–3.9 (10 vulnerabilities). 3. Publication and Update Dates: - Each vulnerability includes specific publication and update dates. 4. CVE ID: - Each vulnerability is assigned a corresponding CVE ID. 5. Affected Products: - Each vulnerability lists affected products, such as FactoryTalk View Machine Edition, FactoryTalk ThinManager, etc. 6. Filtering and Sorting Options: - Users can filter vulnerabilities by severity, publication date, update date, CVSS score, product, Known Exploited Vulnerabilities (KEV), remediation status, workarounds, etc. This information enables users to understand the detailed status of specific vulnerabilities and take appropriate security measures.

Goal Reached Thanks to every supporter — we hit 100%!

Rockwell Automation Multiple Product Vulnerability Bulletin (SD1698-SD1712)