漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality
Vulnerability Description
A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, a malicious user with basic user group privileges could potentially sign into the software and receive FTSP Administrator Group privileges. A threat actor could potentially read and modify sensitive data, delete data and render the FTSP system unavailable.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
关键资源的不正确权限授予
Vulnerability Title
Rockwell Automation FactoryTalk Services Platform 安全漏洞
Vulnerability Description
Rockwell Automation FactoryTalk Services Platform是美国罗克韦尔(Rockwell Automation)公司的一套由多个产品组成的服务平台,它为应用程序提供常规服务,如诊断信息、健康监视和实时数据访问等。 Rockwell Automation FactoryTalk Services Platform 存在安全漏洞。攻击者利用该漏洞会读取和修改敏感数据、删除数据并使 FTSP 系统不可用。
CVSS Information
N/A
Vulnerability Type
N/A