Unscored severity · published Mar 31, 2015
CVE-2014-9209
Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
Factorytalk Services Platform · Rockwellautomation
through 2.70.00 · source: NVD
FV
Factorytalk View Studio · Rockwellautomation
through 8.00.00 · source: NVD
Affected product
FS
Factorytalk Services Platform
Rockwellautomation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-9209
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-9209
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-062-02
rockwellautomation.custhelp.com
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/646323
More from Factorytalk Services Platform
9.8
CVE-2021-22681
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
10.0
CVE-2020-14516
In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk…
9.8
CVE-2020-6967
In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, FactoryTalk Diagnostics exposes a .NET Remoting endpoint…
9.1
CVE-2024-21917
Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability
8.8
CVE-2024-21915
Rockwell Automation FactoryTalk® Service Platform Elevated Privileges Vulnerability Through Web Service Functionality