PT-2023-7571 · Rockwell Automation · Factorytalk Services Platform

CVE-2023-46290 · Publicado 2023-10-27 · Atualizado 2024-05-22

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FactoryTalk Services Platform (affected versions not specified)

Description The issue is related to inadequate code logic in the FactoryTalk Services Platform, which could allow a previously unauthenticated threat actor to obtain a local Windows OS user token through the web service. This token could then be used to log in to the FactoryTalk Services Platform. The vulnerability can only be exploited if an authorized user did not previously log in to the web service. It is associated with weaknesses in the authentication procedure, potentially allowing a remote attacker to bypass authentication and gain full access to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2023-08627

CVE-2023-46290

Produtos afetados

Factorytalk Services Platform

Referências · 9

• https://t.me/cibsecurity/73078 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-46290 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-46290 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1717973985005048239 · Publicação no Twitter
• https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141165 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1718002926151496020 · Publicação no Twitter
• https://t.me/cvenotify/60106 · Publicação no Telegram
• https://t.me/true_secator/5765 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-08627 · Nota de Segurança