CVEvulnerability

CVE-2022-3158

8.8 HIGH Published 2022-10-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-10-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-89

Description

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully exploited, this could allow a user with basic user privileges to perform remote code execution on the server.

Affected configurations

• rockwellautomation factorytalk vantagepoint 8.0 • rockwellautomation factorytalk vantagepoint 8.10 • rockwellautomation factorytalk vantagepoint 8.20 • rockwellautomation factorytalk vantagepoint 8.30 • rockwellautomation factorytalk vantagepoint 8.31

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References