CVE-2024-37367 Rockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction

What is CVE-2024-37367?

CVE-2024-37367 is a high-severity authentication bypass vulnerability in Rockwell Automation FactoryTalk® View SE, published on 14 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. This action is allowed without proper authentication verification.

Weakness: CWE-287

Which versions are affected by CVE-2024-37367?

It affects 1 product.

Products include Rockwellautomation Factorytalk View.

How do I fix CVE-2024-37367?

No fix has been published for CVE-2024-37367 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2024-37367 being exploited?

There is no known exploitation of CVE-2024-37367 in the wild and no public exploit code.

Other vulnerabilities in Rockwell Automation FactoryTalk® View SE

• CVE-2023-2071 FactoryTalk View Machine Edition Vulnerable to Remote Code Execution Critical 9.8
• CVE-2024-45824 FactoryTalk® View Site Edition Remote Code Execution Vulnerability via Lack of Input Validation Critical 9.2
• CVE-2020-12029 Rockwell Automation FactoryTalk View SE Critical 9.0
• CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability High 8.8
• CVE-2025-9064 Rockwell Automation FactoryTalk View Machine Edition Path Traversal High 8.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xcj3-hfw8-h3h5.