CVE-2024-6325

The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html  and CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html  by implementing CIP security and did not update to the versions of the software CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html  and CVE-2022-1161. https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html

Score

CVSS 3.1 6.5 Medium

Status

Modified - PSIRT@rockwellautomation.com

Published

2024-07-16

Last modified

2024-08-01

Weaknesses

CWE-269, CWE-276

Affected products

• Factorytalk Policy Manager Ftpm (Rockwell Automation)
• Factorytalk System Services Installed Via Ftpm (Rockwell Automation)
• Factorytalk Policy Manager (Rockwellautomation)

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1678.html