CVE-2024-45824: FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-12 · updated 2026-06-17
Weakness: CWE-77

Description

CVE-2024-45824 IMPACT A remote code vulnerability exists in the affected products. The vulnerability occurs when chained with Path Traversal, Command Injection, and XSS Vulnerabilities and allows for full unauthenticated remote code execution. The link in the mitigations section below contains patches to fix this issue.

Affected products

Rockwell Automation FactoryTalk View SE: from 12.0 through 14.0

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1696.html

Get alerted when CVE-2024-45824 or the next vulnerability affects your stack