7.5
High
CVE-2022-38744 An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events…
Description
An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FactoryTalk Alarm and Events Server | Versions not published |