CVE-2016-4522

Critical

Published: 28/07/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before version 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

Attackers may gain access to sensitive data or modify the database, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to update the software to version 2.20.00 or later to mitigate this vulnerability.

Original NVD description (English source)

SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.