CVE:CVE-2014-9209
CNNVD:CNNVD-201503-437
Rockwell Automation FactoryTalk Services Platform和FactoryTalk View Studio都是美国罗克韦尔（Rockwell Automation）公司的产品。FactoryTalk Services Platform是一套由多个产品组成的服务平台，它为应用程序提供常规服务，如诊断信息、健康监视和实时数据访问等。FactoryTalk View Studio是一套用于监控和控制分布式服务器、多用户应用程序的HMI软件。
Rockwell Automation FactoryTalk Services Platform 2.71.00之前版本和FactoryTalk View Studio 8.00.00及之前版本中存在不可信搜索路径漏洞。本地攻击者可借助Trojan horse DLL文件利用该漏洞获取权限。
solution:Upgrade rockwellautomation factorytalk_services_platform to a higher version than 2.70.00,and avoid the version (,2.70.00]; Upgrade rockwellautomation factorytalk_view_studio to a higher version than 8.00.00,and avoid the version (,8.00.00]