CVE-2017-6015

CVE-2017-6015 is a path ambiguity vulnerability in Rockwell Automation FactoryTalk Activation version 4.00.02 and earlier, where the lack of quotation marks around file paths allows an authorized local user to execute arbitrary code with elevated privileges. This vulnerability carries a high CVSS v3 base score of 8.8, indicating a local attack vector with low attack complexity, requiring low privileges, and resulting in high confidentiality, integrity, and availability impacts. While Rockwell Automation has released version 4.01 to address this flaw, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention and article.