Allen-Bradley 5069-L46ERMW

The part number 5069-L46ERMW represents the Rockwell Automation FactoryTalk Remote Access (FTRA) software, designed for efficient remote access and management of industrial control systems. It is important to note that this product has a vulnerability, designated CVE-2024-3640, which could allow remote code execution if exploited. Rated 6.5/10 on the CVSS 3.1 scale and 7.0/10 on the CVSS 4.0 scale, the vulnerability stems from an unquoted executable path in the FTRA installer package, potentially allowing a malicious actor with admin privileges to execute harmful software as a System user. To address this issue, users should adopt best security practices such as ensuring software is up-to-date, specifically upgrading from versions v13.5.0.174 and earlier to v13.6 or later. Additionally, users can utilize Stakeholder-Specific Vulnerability Categorization for tailored prioritization and access CVE information in VEX format to streamline their vulnerability management efforts.