VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026

CVE-2022-3158

CVE-2022-3158

Description

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully exploited, this could allow a user with basic user privileges to perform remote code execution on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Rockwellautomation/Factorytalk Vantagepoint6 versions
    cpe:2.3:a:rockwellautomation:factorytalk_vantagepoint:8.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:rockwellautomation:factorytalk_vantagepoint:8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:rockwellautomation:factorytalk_vantagepoint:8.10:*:*:*:*:*:*:*
    • cpe:2.3:a:rockwellautomation:factorytalk_vantagepoint:8.20:*:*:*:*:*:*:*
    • cpe:2.3:a:rockwellautomation:factorytalk_vantagepoint:8.30:*:*:*:*:*:*:*
    • cpe:2.3:a:rockwellautomation:factorytalk_vantagepoint:8.31:*:*:*:*:*:*:*
    • (no CPE)range: 8.0, 8.10, 8.20, 8.30, 8.31
  • Rockwellautomation/FactoryTalk® ViewPointcpe-rescue

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.