nvd-json-data-feeds/CVE-2024/CVE-2024-373xx/CVE-2024-37368.json

{
  "id": "CVE-2024-37368",
  "sourceIdentifier": "PSIRT@rockwellautomation.com",
  "published": "2024-06-14T15:15:52.100",
  "lastModified": "2024-06-17T12:42:04.623",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "A user authentication vulnerability exists in the Rockwell Automation\u00a0FactoryTalk\u00ae View SE. The vulnerability allows a user from a remote system with FTView to send a packet to the customer\u2019s server to view an HMI project. Due to the lack of proper authentication, this action is allowed without proper authentication verification."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de autenticaci\u00f3n de usuario en Rockwell Automation FactoryTalk\u00ae View SE. La vulnerabilidad permite a un usuario desde un sistema remoto con FTView enviar un paquete al servidor del cliente para ver un proyecto HMI. Debido a la falta de autenticaci\u00f3n adecuada, esta acci\u00f3n se permite sin una verificaci\u00f3n de autenticaci\u00f3n adecuada."
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "PSIRT@rockwellautomation.com",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1676.html",
      "source": "PSIRT@rockwellautomation.com"
    }
  ]
}