PT-2023-3620 · Rockwell Automation · Factorytalk Policy Manager+1

Sharon Brizinov · Publicado 2023-06-13 · Atualizado 2023-06-26 · CVE-2023-2639

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rockwell Automation's FactoryTalk System Services (affected versions not specified) FactoryTalk Policy Manager (affected versions not specified)

Description The underlying feedback mechanism of Rockwell Automation's FactoryTalk System Services does not verify the origin of communication, potentially allowing a threat actor to craft a malicious website. This website, when visited, can send a malicious script to connect to the local WebSocket endpoint, waiting for events as if it were a valid client device. If successfully exploited, this could allow a threat actor to receive information, including whether FactoryTalk Policy Manager is installed and potentially the entire security policy.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Enumeração de Fraquezas

CWE-346

Identificadores relacionados

BDU:2023-03904

CVE-2023-2639

Produtos afetados

Factorytalk Policy Manager

Factorytalk System Services

Referências · 8

• https://vuldb.com/ru/?id.231496 · Nota
• https://cybersecurity-help.cz/vdb/SB2023061425 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-2639 · Nota de Segurança
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683 · Aviso do Fabricante
• https://t.me/cibsecurity/65177 · Publicação no Telegram
• https://cisa.gov/news-events/ics-advisories/icsa-23-164-02 · Nota
• https://bdu.fstec.ru/vul/2023-03904 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-2639 · Aviso do Fabricante