Rockwell Automation FactoryTalk Activation Manager Cryptographic Vulnerability Allowing Traffic Decryption

A vulnerability exists in Rockwell Automation's FactoryTalk Activation Manager, specifically in version 5.00. The issue arises from an error in the implementation of cryptography, which could enable attackers to decrypt traffic. This vulnerability could lead to data exposure, session hijacking, or a complete compromise of communication.

Impact

Exploitation of this vulnerability could result in decrypted traffic, allowing for potential data exposure, session hijacking, or full communication compromise.

Remediation

Users of FactoryTalk Activation Manager version 5.00 should upgrade to version 5.02. For those unable to upgrade, Rockwell Automation recommends following their security best practices.