CVE-2017-14022

State: Published
Severity: Not scored
Published: Dec 23, 2017
Updated: Aug 5, 2024
Reserved: Aug 30, 2017

Description

An Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and Events, Version 2.90 and earlier. An unauthenticated attacker with remote access to a network with FactoryTalk Alarms and Events can send a specially crafted set of packets packet to Port 403/TCP (the history archiver service), causing the service to either stall or terminate.

Scores

The record has no CVSS score.

Weaknesses

CWE-20

Affected Products

Product	Versions
Rockwell Automation FactoryTalk Alarms and Eventsn/a	Rockwell Automation FactoryTalk Alarms and EventsAffected

References

https://ics-cert.us-cert.gov/advisories/ICSA-17-341-02
102114vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.