← Database

CVE-2022-38744

HIGH CVSS: 7.5 Published: 2022-10-27 Modified: 2026-06-17

Description

An unauthenticated attacker with network access to a victim's Rockwell Automation FactoryTalk Alarm and Events service could open a connection, causing the service to fault and become unavailable. The affected port could be used as a server ping port and uses messages structured with XML.

Affected Platforms

Rockwellautomation Factorytalk Alarms And Events

Weakness Type

CWE-287, CWE-287

References