← Back

Factorytalk Energrymetrix

factorytalk_energrymetrix

Vendor: Rockwellautomation • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-4531
1Rockwellautomation
1Factorytalk Energrymetrix
May 6, 2026
Jul 28, 2016
N/A· v4
7.3 HIGH· v3
7.5 HIGH· v2
Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVE-2016-4522
1Rockwellautomation
1Factorytalk Energrymetrix
May 6, 2026
Jul 28, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.