9.1
Critical
CVE-2024-10943 An authentication bypass vulnerability exists in the affected product
Description
An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required during authentication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FactoryTalk Updater | 4.00.00-4.10.00 | No fix stated |
| factorytalk_updater 4.00 | 4.00.00 → 4.20.00 | No fix stated |