CVE Catalog
CVE-2016-4531
HighSummary
Rockwell Automation FactoryTalk EnergyMetrix versions before 2.20.00 do not invalidate credentials upon a logout action, making it easier for remote attackers to gain access by leveraging an unattended workstation.
Risk Assessment
The lack of credential invalidation upon logout poses a risk of unauthorized access to the system, potentially leading to data theft or system manipulation.
Recommendation
It is recommended to upgrade to version 2.20.00 or later to ensure credential invalidation upon logout.
Other vulnerabilities in Rockwell Automation FactoryTalk EnergyMetrix
Original NVD description (English source)
Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.