A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘development’, the attacker can disable FTSP token validation. This bypass allows access to create, update, and delete FTLinx drivers.
The product does not properly manage a user within its environment.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Factorytalk_linx | Rockwellautomation | * | 6.50 (excluding) |