Rockwell Automation’s Vulnerability Patch-a-palooza: Critical Flaws Fixed!
Rockwell Automation patches critical vulnerabilities in its FactoryTalk software, including a remote command execution bug. DataMosaix also gets a fix for a SQLite flaw. While no wild exploits are reported, organizations should act fast—because hackers love industrial automation systems as much as we love Wi-Fi at a coffee shop.
Hot Take:
Looks like Rockwell Automation is doing a spring cleaning in autumn! With a slew of vulnerabilities patched, their systems have more holes than Swiss cheese, but at least they’re plugging them faster than a toddler can find a mud puddle!
Key Points:
- Rockwell Automation released six new security advisories for critical and high-severity vulnerabilities.
- FactoryTalk View Machine Edition had one critical and one high-severity issue patched.
- DataMosaix Private Cloud had a critical SQLite vulnerability and a high-severity path traversal issue resolved.
- Additional fixes include a DoS vulnerability in the ICE2 controller and a credential exposure in PowerFlex 755.
- No evidence of exploitation in the wild, but CISA has issued advisories for these vulnerabilities.
Already a member? Log in here