CVE-2024-6325 Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services
Unsecured private keys in FactoryTalk System Services allow attackers to bypass security controls and escalate privileges within industrial automation environments.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-6325?
CVE-2024-6325 is a medium-severity vulnerability in Rockwell Automation FactoryTalk® Policy Manager (FTPM), published on 16 Jul 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1550.html and CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html by implementing CIP security and did not update to the versions of the software CVE-2022-1161 https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html and CVE-2022-1161. https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.PN1585.html
Which versions are affected by CVE-2024-6325?
It affects 1 product.
Products include Rockwellautomation Factorytalk Policy Manager.
How do I fix CVE-2024-6325?
No fix has been published for CVE-2024-6325 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-6325 being exploited?
There is no known exploitation of CVE-2024-6325 in the wild and no public exploit code.
Other vulnerabilities in Rockwell Automation FactoryTalk® Policy Manager (FTPM)
- CVE-2023-2637 Rockwell Automation FactoryTalk System Services Vulnerable To Use Of Hard-Coded Cryptographic Key
- CVE-2023-2638 Rockwell Automation FactoryTalk System Services Vulnerable to a Denial-of-Service Attack
- CVE-2023-2639 Rockwell Automation FactoryTalk System Services Vulnerable to Sensitive Information Disclosure
- CVE-2024-6326 Rockwell Automation Unsecured Private Keys in FactoryTalk® System Services
Sources
Also known as GHSA-j8wv-5g58-r5vh.