Rockwell Automation FactoryTalk Linx Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the x86 Microsoft Installer File (MSI) associated with FactoryTalk Linx, version 6.40 and prior. This vulnerability allows authenticated attackers with valid Windows user credentials to initiate a repair process, hijacking the resulting console window. Exploitation of this vulnerability enables the attacker to launch a command prompt with SYSTEM-level privileges, granting full access to all files, processes, and system resources.

Impact

Exploitation of this vulnerability allows for privilege escalation to SYSTEM-level, enabling full control over the affected system's files, processes, and resources.

Remediation

Users are advised to upgrade to FactoryTalk Linx version 6.50 or later. For those unable to upgrade, Rockwell Automation recommends following their security best practices.