PT-2023-3726 · Rockwell Automation · Factorytalk Policy Manager+1

Sharon Brizinov · Publicado 2023-06-13 · Atualizado 2023-06-26 · CVE-2023-2637

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FactoryTalk System Services (affected versions not specified) FactoryTalk Policy Manager (affected versions not specified)

Description The issue is related to the use of a hard-coded cryptographic key in Rockwell Automation's FactoryTalk System Services to generate administrator cookies. This may lead to privilege escalation, allowing a local, authenticated non-admin user to generate an invalid administrator cookie and gain administrative privileges to the FactoryTalk Policy Manager database. The threat actor could make malicious changes to the database, which would be deployed when a legitimate user deploys a security policy model. User interaction is required for successful exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

CWE-321

Identificadores relacionados

BDU:2023-04014

CVE-2023-2637

Produtos afetados

Factorytalk Policy Manager

Factorytalk System Services

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-2637 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-2637 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-04014 · Nota de Segurança
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683 · Aviso do Fabricante
• https://t.me/cibsecurity/65176 · Publicação no Telegram