CVEvulnerability
CVE-2014-9209
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected configurations
• rockwellautomation factorytalk services platform (<= 2.70.00)
• rockwellautomation factorytalk view studio (<= 8.00.00)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-062-02 Third Party Advisory, US Government Resource
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/646323 rockwellautomation.custhelp.com
- https://ics-cert.us-cert.gov/advisories/ICSA-15-062-02 Third Party Advisory, US Government Resource
- https://rockwellautomation.custhelp.com/app/answers/detail/a_id/646323 rockwellautomation.custhelp.com