Auth Bypass via Shared Secrets across Accounts
CVE-2024-45823 Published on September 12, 2024
FactoryTalk® Batch View™ Authentication Bypass Vulnerability via shared secrets
CVE-2024-45823 IMPACT
An
authentication bypass vulnerability exists in the affected product. The
vulnerability exists due to shared secrets across accounts and could allow a threat
actor to impersonate a user if the threat actor is able to enumerate additional
information required during authentication.
Vulnerability Analysis
CVE-2024-45823 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is an authentification Vulnerability?
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
CVE-2024-45823 has been classified to as an authentification vulnerability or weakness.
Products Associated with CVE-2024-45823
Want to know whenever a new CVE is published for Rockwellautomation Factorytalk Batch View? stack.watch will email you.
Affected Versions
Rockwell Automation FactoryTalk® Batch View™:- Version 2.01.00 is affected.
- Version 2.01.00 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.