Skip to content
7.3 High

CVE-2024-37365 A remote code execution vulnerability exists in the affected product

Description

A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escalate their privileges by changing the macro to execute arbitrary code.

Affected products and versions

Product Affected versions Fixed in
FactoryTalk View Machine Edition 14 14 → latest No fix stated
factorytalk_view_machine_edition 14 earliest → 14 No fix stated
The 3 CVEs of FactoryTalk View Machine Edition →
Track this CVE