漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services
Vulnerability Description
An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders when they are temporarily copied to an interim folder. This vulnerability is due to the lack of explicit permissions set on the backup folder. If private keys are obtained by a malicious user, they could impersonate resources on the secured network.
CVSS Information
N/A
Vulnerability Type
特权管理不恰当
Vulnerability Title
Rockwell Automation FactoryTalk System Service 安全漏洞
Vulnerability Description
Rockwell Automation FactoryTalk System Service是美国罗克韦尔(Rockwell Automation)公司的一款应用程序。提供实施安全策略所需的策略授权、证书授权、身份服务和部署服务。 Rockwell Automation FactoryTalk System Service存在安全漏洞,该漏洞源于存在敏感信息泄露漏洞,导致攻击者可冒充安全网络上的资源。
CVSS Information
N/A
Vulnerability Type
N/A