CVSS v3 8.8 REPOSTED INFORMATION This advisory was originally posted to the NCCIC Portal on February 16, 2017, and is being released to the ICS-CERT web site. AFFECTED PRODUCTS The following versions of FactoryTalk Activation, a component of FactoryTalk Services Platform, are affected: • FactoryTalk Activation Service, Version 4.00.02 and prior versions. Without quotation marks, any whitespace in the file path remains ambiguous, which may allow an attacker to link to or run a malicious executable. This may allow an authorized, but not privileged local user to execute arbitrary code with elevated privileges on the system. Has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is ().

The FactoryTalk Activation Manager (formerly the FactoryTalk Activation Tool) which comes with Rockwell software that uses FTActivation has a wizard to help you find this, but if your handy with PC's you'll already know how to find your MAC ADDRESS or Hard Drive serial number. FactoryTalk Activation Manager v4.00 and earlier Ships with FlexNet Publisher v11.11.1.1 and earlier. The following products require FactoryTalk Activation Manager to store and keep track of Rockwell Automation software products and activation files.

RESEARCHER Rockwell Automation reported the vulnerability. BACKGROUND Critical Infrastructure Sectors: Chemical, Critical Manufacturing, Food and Agriculture, Water and Wastewater Systems Countries/Areas Deployed: Worldwide Company Headquarters Location: Milwaukee, Wisconsin Contact Information For any questions related to this report, please contact the NCCIC at: Email: Toll Free: 1-888-282-0870 For industrial control systems cybersecurity information: or incident reporting: The NCCIC continuously strives to improve its products and services. You can help by choosing one of the links below to provide feedback about this product.

Rehosting Rockwell Automation Software with Internet Access Moving or transferring, also known as rehosting, a Rockwell Automation Software License from one computer to another can get tricky. In our rehosting blog series, we guide you through the different software activation reset processes based on your internet access.

In this post we provide step by step instructions on how to move an activation/license when you have internet access on both devices. If you do not have internet access, check out our other blog posts: • • • Before you begin: • If rehosting a dongle-based activation, insert the dongle into the USB drive of the Internet connected computer. That's why you go mltr. • Make sure you have the “Activation Manager” software utility installed.

The Activation Manager comes with all Rockwell Automation software, or it can be downloaded from the Software Activation Site here.