The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Windows user or Windows DeskLock passwords. If the compromised user has an administrative account, an attacker could gain full access to the user’s operating system and certain components of FactoryTalk View SE.
A workaround or mitigation is available. Apply it until an official patch is released.
CVSS v4.0 Metrics
Exploitability
Attack VectorLocal
ComplexityLow
RequirementsPresent
PrivilegesLow
User InteractionNone
Threat
Exploit MaturityUnreported
Vulnerable System
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Change Log
| Date | Source | Changes | Score |
|---|
| 2026-07-21 | nvd | patch: Unavailable→Mitigation | 4.4 → 4.4 |
| 2026-07-21 | cve.org | initial, patch: Unavailable | 4.4 |
Affected Software
| Vendor | Product | Version |
|---|
| Rockwell Automation | FactoryTalk View SE | ≤ 9.0 |
| Rockwell Automation | FactoryTalk View SE | 10.0 |
| rockwellautomation | factorytalk_view | ≤ 9.0 |
| rockwellautomation | factorytalk_view | 10.0 |
Published: 2022-02-24
