7.3
High
CVE-2024-37365 A remote code execution vulnerability exists in the affected product
Description
A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escalate their privileges by changing the macro to execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FactoryTalk View Machine Edition 14 | 14 → latest | No fix stated |
| factorytalk_view_machine_edition 14 | earliest → 14 | No fix stated |