Skip to content
CVE Tracker
Back

CVE-2017-6015

Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous,…

High7.8EPSS 0.69%
Published
Updated
Reserved
Assigned by
icscert

Description

Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 remains ambiguous, which may allow an attacker to link to or run a malicious executable. This may allow an authorized, but not privileged local user to execute arbitrary code with elevated privileges on the system. CVSS v3 base score: 8.8, CVSS vector string: (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Rockwell Automation has released a new version of FactoryTalk Activation, Version 4.01, which addresses the identified vulnerability. Rockwell Automation recommends upgrading to the latest version of FactoryTalk Activation, Version 4.01 or later.

Scores

CVSS scores of CVE-2017-6015, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0High7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.69% · top 47% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

Affected products

  • Rockwell Automation · FactoryTalk Activation

    • affected FactoryTalk Activation Service, Version 4.00.02 and prior versions.

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .