Rockwell Automation FactoryTalk ViewPoint Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Rockwell Automation's FactoryTalk ViewPoint, specifically in versions 14.0 and earlier. The issue arises from improper management of Microsoft Installer (MSI) repair operations. During the repair process, attackers can take control of the cscript.exe console window, which operates with SYSTEM privileges. This exploitation can be used to open an elevated command prompt, allowing for full privilege escalation.

Impact

Exploitation of this vulnerability allows for unauthorized users to gain elevated privileges, potentially leading to full control over the affected system.

Remediation

Users are advised to update to FactoryTalk ViewPoint version 15.0. For those unable to upgrade, security best practices should be followed.